arfis

automated Remote File Inclusion search

RFI (0.2): Public Media Manager September 14, 2007

Filed under: RFI — arfis @ 4:02 am

Project Name: Public Media Manager
Project Link: http://sourceforge.net/projects/pmm-cms/
Project DL: http://surfnet.dl.sourceforge.net/sourceforge/pmm-cms/pmm-cms_1.3.tar.gz
RFI Info:
File: tmp/pmm-cms_1.3.ta/NewsCMS/news/newstopic_inc.php
Line: 2
Vuln Code: if (!empty($indir)) include_once ($indir).”/newsdb/config.php”;

(found with version 0.2 – 2962 projects processed so far)