DDL CMS 1.0 Multiple Remote File Inclusion Vulnerabilities

[Mr Happy]

Have fun, kiddos... it was posted yesterday @ milw0rm

And later in the same post. Great copy and paste job!

# milw0rm.com [2009-09-21]

Ya their's topics here on KWWH about the venerabilities in DDLCMS and arguments between the owner of the script and Jmz.

You've posted one for Version 1 which is really old. Version 2 had ones too which some of which were fixed. Will be interesting to see Version 3. Didn't even know their was one coming.

Some people prefer DDLCMS over WCDDL as it has a lot of basic stuff installed while WCDDL has less features. It's intended that way to use as a base and any good coder or webmaster would prefer WCDDL. A lot of noobs prefer DDLCMS as their's less work in setting it up as a lot of extra features are included even though it's poorly coded.

[JmZ]

Mr Happy, good to see someone who fully understands the audience i'm aiming at with WCDDL.

As for exploits, I believe DDLCMS will always contain some kind of vulnerability, considering both 1.x and 2.x still contain them.

I didn't really argue with him in the past, I just pointed bad things out about his script which he responded to with a huge badly-worded post.

[litewarez]

them other vulns you mentioned JMZ (several admin vulns) i posted months ago lol in chat !

took me like 3-4 mins to find that many i done this


DDLCMS.zip > Recycle Bin

[JmZ]

Yeah i know, I showed you a couple when it first got released.