AOH :: HP Unsorted B :: TB11892.HTM

Baidu Soba Remote Code Execute Vulnerability(FGA-2007-10)



Baidu Soba Remote Code Execute Vulnerability(FGA-2007-10)
Baidu Soba Remote Code Execute Vulnerability(FGA-2007-10)


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The entire AOH site is optimized to look best in Firefox® 3 on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH
We do not send spam. If you have received spam bearing an artofhacking.com email address, please forward it with full headers to abuse@artofhacking.com.