B-Hind CMS suffers from an arbitrary file upload vulnerability.
97ed6c0cf971ffd8874955c3bae801f0b8abdec48bef8aefbbae98eba7c9bd3c
####################################################
#Title: B-Hind CMS (tiny_mce) Remote File Upload
#Vendor: http://www.b-hind.eu/
####################################################
#AUTHOR: h00die
####################################################
#DESCRIPTION (by vendor):#################################
B-interference Lite is a simple CMS for *small websites*. Ideal for local
merchants or organizations. The content of page can be adjusted by*a simple
double click* on the text or title in question. bijmaken a page and / or
removal is easy to use buttons on the website menu.The system is naturally*
multilingual*.
#POC:################################################
http://site.com/admin/includes/tiny_mce/plugins/tinybrowser/upload.php
#DEMO:###############################################
Live Site:
http://toerisme-halle.be/b-hind/scripts/tiny_mce/plugins/tinybrowser/upload.php?type=image
#[EOF]