arfis

automated Remote File Inclusion search

RFI (0.2): PKTorrent Lister/Crawler September 14, 2007

Filed under: RFI — arfis @ 3:19 am

Project Name: PKTorrent Lister/Crawler
Project Link: http://sourceforge.net/projects/pktorrents/
Project DL: http://surfnet.dl.sourceforge.net/sourceforge/pktorrents/pktorrents_PKTv0.1beta.zip
RFI Info:
File: tmp/pktorrents_PKTv0.1beta/pktorrents/admin/bbclone/lib/selectlang.php
Line: 17
Vuln Code: if (is_readable($BBC_LIB_PATH.”html.php”)) require_once($BBC_LIB_PATH.”html.php”);

(found with version 0.2 – 2677 projects processed so far)