Etomite CMS "Backdoored"

/ Package: Etomite Content Management System Auth: http://www.etomite.org/ Versions: 0.6 / previous versions may also be backdoored Vulnerability Type: Remote Code Execution / Disclaimer: --------- The information is provided "as is" without warranty of any kind. The author of this issue shall no...

CVE-2006-0325: Improper Neutralization of Special Elements used in an OS Command

Etomite Content Management System 0.6, and possibly earlier versions, when downloaded from the web site in January 2006 after January 10, contains a back door in manager/includes/todo.inc.php, which allows remote attackers to execute arbitrary commands via the "cij" parameter...