inurl:newsdesk.cgi? inurl:"t="

• SHDB
• 2841 views

• 日期：2004-11-07
• 类别：
  • Vulnerable Servers
• 作者：anonymous
• 语法：inurl:newsdesk.cgi? inurl:"t="

• Newsdesk is a cgi script designed to allow remote administration of website news headlines.Due to a failure in the sanitization of parameters a remote user can reveal the contents of any file. This allows the attacker to download user and password data.It is furthermore known that it is possible to run system commands remotely.