<<< Date Index >>> <<< Thread Index >>>

Re: file include exploits in randshop v1.2

To: black code <black-cod3@xxxxxxxxxxx>
Subject: Re: file include exploits in randshop v1.2
From: Rainer Duffner <rainer@xxxxxxxxxxxxxxx>
Date: Tue, 04 Jul 2006 21:26:59 +0200
Cc: bugtraq@xxxxxxxxxxxxxxxxx
In-reply-to: <BAY13-F21FACAAD6CB168AB3B462ADE710@xxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
References: <BAY13-F21FACAAD6CB168AB3B462ADE710@xxxxxxx>
User-agent: Thunderbird 1.5.0.2 (X11/20060515)

black code wrote:

file include exploits in randshop v1.2
forum type : randshop v1.2
bug found by : black-code
team : site-down
type : file include




Older versions (e.g. 0.9.3) are vulnerable, too.



cheers,
Rainer

References:
- file include exploits in randshop v1.2
  - From: black code

Prev by Date: [scip_Advisory 2352] F5 FirePass 4100 prior 6.x multiple Cross Site Scripting
Next by Date: Re: WordPress 2.0.3 SQL Error and Full Path Disclosure
Previous by thread: file include exploits in randshop v1.2
Next by thread: PhpWebGallery Cross Site Scripting Vulnerability
Index(es):
- Date
- Thread