##############################################################

XMRS Multiple Vulnerabilities (ZeroDay at 25-07-2008)

Author: AzzCoder [EMAIL PROTECTED]

Product: http://www.xrms.org/

Product Type: CRM

Thanks: coresecurity.com


Remote File Inclusion

        File: activities/workflow-activities.php

        Variable: $include_directory

        Required register_globals: Yes


XSS

        Multiple Files

        Variable: $msg

        Quote limitations: Yes


Information Gathering

        tests/info.php

        phpinfo() call


##############################################################


# milw0rm.com [2008-07-25]

Reply via email to