logo
::[Home]
::[News]
::[Challenges]
::[Ranking]
::[My Account]
::[Forum]
::[Chat]
::[Private Messages]
::[Vulnerable Code]
::[Tutorials]
::[Downloads/Scripts]
::[Support]
::[Links]
::[Contact/FAQ]
::[Login]
0 anonymous
Views: 1075344 Challenges: 342
Users: 12689 Online: 10

Settings
Search
0 new posts

plaNetStat - Arbitrary File Download – 1 Posts

  • plaNetStat - Arbitrary File Download

    05/26/2006 15:15
    theblacksheep's Avatar theblacksheep 5610
    Not SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot Specified
    The \"plaNetStat\" script gives an admin information about how many user have visited the website, which browser they have used and all that kind of stuff.<br><br><a href="%5C"><img alt="\&quot;link\&quot;" src="%5C">http://www.planetc.de</a><br><br>It is also possible to download the log files to have a look at them locally.<br>The creators of the script suggest that everyone protects the admin folder with .htaccess.<br>Nevertheless not everyone does!<br><br>Therefore everyone can download arbitrary files:<br><br>...planetstat/admin/logfiles.php?download=[PATH]<br><br>This often helps to get a foothold for further activities.<br>Maybe even other things are possible but I had no time to do further research so far.<br><br>tbs
    Edit
    Reply
    Quote
    0 Likes