Ajax Shoutbox shoutbox.php phpbb_root_path Variable Remote File Inclusion

2006-10-12T00:00:00
ID OSVDB:36056
Type osvdb
Reporter OSVDB
Modified 2006-10-12T00:00:00

Description

Manual Testing Notes

http://[target]/phpBB2/shoutbox.php?phpbb_root_path=

References:

ISS X-Force ID: 29510 Generic Exploit URL: http://milw0rm.com/exploits/2532 CVE-2006-5312