Home / exploits

PDF

xrms-rfixss.txt

Posted on 25 July 2008

##############################################################

XMRS Multiple Vulnerabilities (ZeroDay at 25-07-2008)
Author: AzzCoder [azzcoder@hotmail.com]
Product: http://www.xrms.org/
Product Type: CRM
Thanks: coresecurity.com

Remote File Inclusion
File: activities/workflow-activities.php
Variable: $include_directory
Required register_globals: Yes

XSS
Multiple Files
Variable: $msg
Quote limitations: Yes

Information Gathering
tests/info.php
phpinfo() call

############################

 

TOP