|
Bugtraq
mailing list archives
XRMS 1.99.2 (RFI/XSS/IG) Multiple Remote Vulnerabilities
From: azzcoder () hotmail com
Date: 25 Jul 2008 15:13:03 -0000
##############################################################
XMRS Multiple Vulnerabilities (ZeroDay at 25-07-2008)
Author: AzzCoder [azzcoder () hotmail com]
Product: http://www.xrms.org/
Product Type: CRM
Thanks: coresecurity.com
Remote File Inclusion
File: activities/workflow-activities.php
Variable: $include_directory
Required register_globals: Yes
XSS
Multiple Files
Variable: $msg
Quote limitations: Yes
Information Gathering
tests/info.php
phpinfo() call
##############################################################
# milw0rm.com [2008-07-25]
By Date
By Thread
Current thread:
- XRMS 1.99.2 (RFI/XSS/IG) Multiple Remote Vulnerabilities azzcoder (Jul 25)
|