[Full-disclosure] Some SQL inj and including hints

Hi all,

1. On Win systems use short directories names like that: Progra~1 == "Program Files" Docume~1 == "Documents and Settings" if you want to create file in space contained folder using INTO OUTFILE/INTO DUMPFILE injection/ Example: http://localhost/inj.php?id='/**/INTO/**/OUTFILE/**/%22C:/PROGRA~1/APACHE/VAR/WWW/index.php%22

In other cases your can't write file using MySQL if their absoute path have a spaces.

2. Use .phtml extension instead of .php to fraud WebApplicationFirewalls and filters.
Default apache2 configuration file like this:

<IfModule mod_php5.c>

AddType application/x-httpd-php .php .phtml .php3 AddType application/x-httpd-php-source .phps
</IfModule>

Sorry for my bests English. -- ----------------------------------------------------------------- Best regards! Vladimir Vorontsov, security expert. ONsec: turn on security _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/

• This message: [ Message body ]
• Next message: Marty Barbella: "[Full-disclosure] XSS Vulnerability in Drupal's Node Blocks contributed module (6.x-1.3 and 5.x-1.1)"
• Previous message: stratsec Research: "[Full-disclosure] Adobe Acrobat Script Injection"

• Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ]