######################################################################## ################# # # not sec group # http://www.notsec.com info@notsec.com # # # [fuzzylime (cms) <= 3.0] # # Class: Local File Inclusion # Found: 08/09/2007 # Site: http://cms.fuzzylime.co.uk/ #Download: http://cms.fuzzylime.co.uk/files/cms.zip #Author: [wHITe_ShEEp] of notsec #Contact: white_sheep@notsec.com - http://www.notsec.com # ######################################################################## ################# vulnerable code: [cms]/code/getgalldata.php ______________________________________________________ 1: _______________________________________________________ Exploit: ( Work only with magic_quotes_gpc = Off ) _______________________________________________________ ________________________________________________________ Thanks to: ________________________________________________________ All notsec.com members; R00T[ATI] for testing; ________________________________________________________ # milw0rm.com [2007-09-08]