arfis

automated Remote File Inclusion search

RFI (0.2): Axiom Photo/News Gallery September 14, 2007

Filed under: RFI — arfis @ 2:24 am

Project Name: Axiom Photo/News Gallery
Project Link: http://sourceforge.net/projects/axiompng/
Project DL: http://surfnet.dl.sourceforge.net/sourceforge/axiompng/Axiom-0.8.6.tar.gz
RFI Info:
File: tmp/Axiom-0.8.6.ta/Apple/template.php
Line: 38
Vuln Code: include_once($baseAxiomPath . “/themes/sickphp/theme.php”);

File: tmp/Axiom-0.8.6.ta/Apple/header.php
Line: 32
Vuln Code: include_once($baseAxiomPath . “/dbFunctions.inc”);

(found with version 0.2 – 2289 projects processed so far)