Etomite CMS <= 0.6.1 (rfiles.php) Remote Command Execution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo Etomite CMS = 0.6.1 'rfiles.php' remote command execution\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n; echo google dork: \Content managed by the Etomite Content Management...

PT-2012-3292

Name of the Vulnerable Software and Affected Versions Open Journal Systems versions prior to 2.3.7 Description The issue concerns multiple directory traversal vulnerabilities in the iBrowser plugin library. These vulnerabilities allow remote authenticated users to delete or rename arbitrary files...

CVE-2012-1467: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in the iBrowser plugin library, as used in Open Journal Systems before 2.3.7, allow remote authenticated users to 1 delete or 2 rename arbitrary files via a .. dot dot in the param parameter to...

CVE-2006-7070: Improper Input Validation

Unrestricted file upload vulnerability in manager/media/ibrowser/scripts/rfiles.php in Etomite CMS 0.6.1 and earlier allows remote attackers to upload and execute arbitrary files via an nfile parameter with a filename that contains a .php extension followed by a valid image extension such as .gif...

Etomite CMS 0.6.1 - 'rfiles.php' Remote Command Execution

!/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $e...

Etomite CMS 0.6.1 - rfiles.php Remote Command Execution

Etomite CMS 0.6.1 - rfiles.php Remote Command Execution !/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15...