EDB-31451

functional

W-Agora 4.0 - 'create_user.php?bn_dir_default' Remote File Inclusion

view exploit source exploit_dbverifiedtype webappsauthor ZoRLupublished 2008-03-20catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2008-1466UShigh7.5Exploit
Multiple PHP remote file inclusion vulnerabilities in W-Agora 4.0 allow remote attackers to execute arbitrary PHP code via a URL in the bn_dir_default parameter to (1) add_user.php…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan