Re: PHPRecipeBook <= 2.35 ((g_rb_basedir)) Remote File Include Exploit

To: "CarcaBotx@xxxxxxxxx" <CarcaBotx@xxxxxxxxx>
Subject: Re: PHPRecipeBook <= 2.35 ((g_rb_basedir)) Remote File Include Exploit
From: str0ke <str0ke@xxxxxxxxxxx>
Date: Wed, 18 Oct 2006 16:23:32 -0500
Cc: bugtraq@xxxxxxxxxxxxxxxxx
Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:sender:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references:x-google-sender-auth; b=H2XgO5s+4JXv7aowW+7Hmlq2BbHPGZejNItT0nOS7JImT1zw9WVRMGR/83CARVNFX9iPcqKeEk2f5c5G/uZgXs0bMC8VWR6Uz82lyavHpySc6kJDWfL7mKwpCVR5JDhSPkaudvIkqcK+hE3P33ByuDbTa0gpf+IPMus1YwSAWoM=
In-reply-to: <20061018115805.3979.qmail@xxxxxxxxxxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
References: <20061018115805.3979.qmail@xxxxxxxxxxxxxxxxx>
Sender: milw0rm@xxxxxxxxx

On 18 Oct 2006 11:58:05 -0000, CarcaBotx@xxxxxxxxx <CarcaBotx@xxxxxxxxx> wrote:
PHPRecipeBook <= 2.35 ((g_rb_basedir)) Remote File Include Exploit


The original author is r0ut3r <writ3r [at] gmail.com>

http://www.milw0rm.com/exploits/2584

His coding style matches up with the rest of his work.

http://www.milw0rm.com/exploits/2563
http://www.milw0rm.com/exploits/2534

/str0ke

References:
- PHPRecipeBook <= 2.35 ((g_rb_basedir)) Remote File Include Exploit
  - From: CarcaBotx

Prev by Date: Static fmat exploits with random va
Next by Date: Security-Assessment.com Advisory: Asterisk remote heap overflow
Previous by thread: PHPRecipeBook <= 2.35 ((g_rb_basedir)) Remote File Include Exploit
Next by thread: Re: PHPRecipeBook <= 2.35 ((g_rb_basedir)) Remote File Include Exploit
Index(es):
- Date
- Thread