CVE-2007-2774

Multiple PHP remote file inclusion vulnerabilities in SunLight CMS 5.3 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter to 1 connect.php or 2 modules/startup.php...

sunlight-rfi.txt

SunLight CMS 5.3 = Remote File Inclusion Vulnerability Dork:""cms SunLight 5.2" Dork2:http://search.seznam.cz/searchScreen?w="cms+SunLight+5.2"&mod=f Vuln Code ERROR1:connect.php /-----vlozeni pristupovych dat-----/ include$root."access.php"; RFI CODE BUG1:...