lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Message-ID: <20060327222051.8779.qmail@securityfocus.com> Date: 27 Mar 2006 22:20:51 -0000 From: stormhacker@...mail.com To: bugtraq@...urityfocus.com Subject: PHPLiveHelper 1.8 remote command execution (include) Xploit (perl) [W]orld [D]efacers Team ====================================== --------------------Summary---------------- eVuln ID: WD00 Vendor: phplivehelper Vendor's Web Site: www.phplivehelper.com Software: Live Customer Support Solution Sowtware's Web Site: http://www.turnkeywebtools.com/index.php/location/products/product/phplivehelper/ Versions: 1.8 Class: Remote PoC/Exploit: Available Solution: Not Available Discovered by: rUnViRuS (worlddefacers.de) -----------------Description--------------- abs_path File Include Vulnerability --------------PoC/Exploit---------------------- http://www.worlddefacers.de/Public/WD-TMPLH.txt --------------Solution--------------------- No Patch available. --------------Credit----------------------- Discovered by: rUnViRuS (worlddefacers.de) -------------------------------------------