Bugtraq mailing list archives

XRMS 1.99.2 (RFI/XSS/IG) Multiple Remote Vulnerabilities

From: azzcoder () hotmail com
Date: 25 Jul 2008 15:13:03 -0000

##############################################################

XMRS Multiple Vulnerabilities (ZeroDay at 25-07-2008)
Author: AzzCoder [azzcoder () hotmail com]
Product: http://www.xrms.org/
Product Type: CRM
Thanks: coresecurity.com

Remote File Inclusion
        File: activities/workflow-activities.php
        Variable: $include_directory
        Required register_globals: Yes

XSS
        Multiple Files
        Variable: $msg
        Quote limitations: Yes

Information Gathering
        tests/info.php
        phpinfo() call

##############################################################

# milw0rm.com [2008-07-25]

Current thread:

XRMS 1.99.2 (RFI/XSS/IG) Multiple Remote Vulnerabilities azzcoder (Jul 25)