Re: MyBlog (MyCMS) Remote PHP Code execution / PHP Code injection ..

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: MyBlog (MyCMS) Remote PHP Code execution / PHP Code injection ..
From: BlackHawk <hawkgotyou@xxxxxxxxx>
Date: Fri, 23 Nov 2007 12:20:57 +0100
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:date:from:x-mailer:reply-to:x-priority:message-id:to:subject:in-reply-to:references:mime-version:content-type:content-transfer-encoding; bh=pn+arRSJYNY/YjDjA5aWnBWfXLq3+pJmgbtEY6fXa1Q=; b=NmHZv/UbAZyN0x9s3uZ3H69MmeVwzjDnohjr6/9aCEam+vRTMCDGHUeqkATeSimfdQ/U6ww0AggqzRC4F/IvK8vTYZJRsh3++THrowIji96nWRL6ohK57GdGTy1pnylIEJg16icuk9vKY2Cg+ufLcI67muwqsLjzKgxwnXbytaQ=
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:date:from:x-mailer:reply-to:x-priority:message-id:to:subject:in-reply-to:references:mime-version:content-type:content-transfer-encoding; b=RrsQPBJEF6SxJ15jKJYibEuSer22RYyu1RE6C3dqsPtCeg5ZXsiSSeE7GbPFFKvSkqIflrexqrpkfER/M3t1gf5JmNn7rwt5BXh0nDOx8DNy6ZZ9kcGZL5yej8ppOP1k48F67+kl8V56GE9d6Y5CdWq/Ds85ZAUf5GFU3/E4P5U=
In-reply-to: <20932423.20071123121953@xxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
References: <20071122103015.14479.qmail@xxxxxxxxxxxxxxxxx> <20932423.20071123121953@xxxxxxxxx>
Reply-to: BlackHawk <hawkgotyou@xxxxxxxxx>

Hello security,

LAME!
already discovered (http://www.milw0rm.com/exploits/4145) on
2007-07-03 by me (BlackHawk)



-- 
Best regards,
 BlackHawk                            mailto:hawkgotyou@xxxxxxxxx

References:
- MyBlog (MyCMS) Remote PHP Code execution / PHP Code injection ..
  - From: security

Prev by Date: Aria-Security.net: Irola My-Time v3.5 SQL Injection
Next by Date: [0day Remote Command Execution] VigileCMS <= 1.8 Stealth
Previous by thread: MyBlog (MyCMS) Remote PHP Code execution / PHP Code injection ..
Next by thread: VigileCMS <= 1.8 Stealth Remote Command Execution Exploit
Index(es):
- Date
- Thread