CVE-2004-0285

This exploit demonstrates a remote file inclusion vulnerability in AllMyPHP applications (AllMyGuests, AllMyLinks, AllMyVisitors) due to insufficient filtering of URI variables used in a 'require_once()' call. It allows remote command execution by injecting a malicious PHP script via the '_AMGconfig[cfg_serverpath]' parameter.

This exploit demonstrates a remote file inclusion vulnerability in AllMyPHP applications (AllMyGuests, AllMyLinks, AllMyVisitors) due to insufficient filtering of URI variables used in a 'require_once()' call. It allows remote command execution by injecting a malicious URL into the '_AMLconfig[cfg_serverpath]' parameter.

This exploit demonstrates a remote file inclusion vulnerability in AllMyGuests due to insufficient filtering of URI variables used in a 'require_once()' call. It allows remote command execution by injecting a malicious URL containing a PHP script that executes system commands.