[過去ログ] キャップ漏れ騒動対策本部 (294レス)
1-

このスレッドは過去ログ倉庫に格納されています。
次スレ検索 歴削→次スレ 栞削→次スレ 過去ログメニュー
5: 2011/01/08(土)13:09 ID:UwwdYj+W(2/2) AAS
-"higashinihon" found 外部リンク[dat]:be.2ch.net
-above file itself do not have any meaning
-though files under /test/sss were viewable due to Apache setting error
-under sss/, there were other cgi's viewable
1/6
-"mopekichi" found it and executed scripts
-That cgi was crap, and without passwords, he was able to get CAP rights, move threads, view other files
-many people executed cgi scrips, and were able to view other cgi script's source
-cgi allows read and write. By using this, user was able to delete files, plant viruses, or worst case, wipe out data
-This cgi bug were capable of executing on other servers as well. No record of how many servers were affected
省10
1-
あと 289 レスあります
スレ情報 赤レス抽出 画像レス抽出 歴の未読スレ AAサムネイル

ぬこの手 ぬこTOP 0.004s