Bugtraq mailing list archives

Re: Atsphp 5.0.1 [Top Sites] [index.php] - Remote File Include


From: Casey Marshall <rsdio () metastatic org>
Date: Tue, 30 Jan 2007 16:33:01 -0800

On Jan 30, 2007, at 3:30 AM, trzindan () hotmail fr wrote:

<snip non-exploit>

You know, I'm personally starting to wonder if these bogus "vulnerabilities" are really just some low-bandwidth communication. Given the "greetz" and "shoutout" crap that follows each posting, which could be a little encoded message. Then just grep PHP code for 'include' or 'require_once', and send.

You aren't plotting terrah with fake PHP 'sploits, are ya?


Current thread: