Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

Philboard (id) Remote SQL Injection

[ECHO_ADV_64$2007] Openi CMS plugins (site protection) remote file inclusion

KvGuestbook Remote Add Admin Exploit

MediaWiki Full Path Disclosure Vulnerability

From:	sn0oPy.team_(at)_gmail.com <sn0oPy.team_(at)_gmail.com>
Date:	12.02.2007
Subject:	phpPolls 1.0.3 (acces to sensitive file)

* phpPolls 1.0.3 (acces to sensitive file)

* By : sn0oPy

* Risk : medium


* exploit :

    Replace http://www.target.ma/phpPolls/index.php3
         by
            http://www.target.ma/phpPolls/phpPollAdmin.php3


* dork : inurl:"phpPolls/"


* contact : sn0oPy@avenir-geopolitique.net

* Site : http://forums.avenir-geopolitique.net

* greetz : [subzero], Avg Team.