Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 28/05/2008 Updated: 29/09/2017

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 1000

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Subscribe to Plusphp Short Url Multi-user Script

PHP remote file inclusion vulnerability in plus.php in plusPHP Short URL Multi-User Script 1.6 allows remote malicious users to execute arbitrary PHP code via a URL in the _pages_dir parameter.

Vulnerable Product	Search on Vulmon	Subscribe to Product
plusphp plusphp short url multi-user script 1.6

Author: DRTOXIC / drtoxic@windowslivecom Title: plusPHP Multi-User Short URL and Statistics (plusphp) RFI Vulnerability Script Download: wwwhotscriptscom/jumpphp?listing_id=80293&jump_type=1 Vulnerability Code: (plusphp) "include ($_pages_dir'_configphp');" Example; localhost/plusphp?_pages_dir=SH3LL? <---- ...

CWE-94 http://www.securityfocus.com/bid/29357 http://secunia.com/advisories/30373 http://www.vupen.com/english/advisories/2008/1645/references https://exchange.xforce.ibmcloud.com/vulnerabilities/42623 https://www.exploit-db.com/exploits/5672 https://nvd.nist.gov https://www.exploit-db.com/exploits/5672/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2008-2480

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect