###############################################################
#
# SiteXS CMS  Remote File Upload Vulnerability
#
###############################################################
#
# Discovered by : Ciph3r
#
#
# E-Mail : Ciph3r_blackhat@yahoo.com
#
################################################################
#
# 
# CMS: sitexs-0.1.1 CMS ( All Version Vulnerable ) 
#  
# Download CMS : http://dfn.dl.sourceforge.net/sourceforge/sitexs/sitexs-0.1.1.tar.gz
#
# Sp TANX4 : google.com ; milw0rm.com ; sourceforge.net
# 
# SP TANX2 : Iranian hacker & Kurdish Security TEAM
#  
# You Must turn on :
# register_globals = On
# register_long_arrays=on
# 
#
################################################################

Upload the shell :

 http://localhost/[sitexs]/adm/visual/upload.php
     

you for use this exploit . you must your shell file exists in exploit directory
then excute exploit you find your shell in below link

 www.example.com/[sitexs]/images/1.gif.php
 www.example.com/[sitexs]/images/[shell][.php]

 :d

# milw0rm.com [2008-06-02]