# MHG Security Team ---Rumble 1.02 version Remote File Inc.

Milli-Harekat Advisory www.milli-harekat.org Rumble = 1.02 version - Remote File Include Vulnerabilities Risk : high Class: Remote Script : Rumble 1.02 version Msn : erne at ernealizm dot com Credits : ERNE Thanks : DjReMix,Thebekir,SpC-x,Eskobar,Blackened,Poizonbox,Dilejyoner And ALL MHG USERS...

CVE-2006-2872: Undefined Security Weakness

PHP remote file inclusion vulnerability in config.php in Rumble 1.02 allows remote attackers to execute arbitrary PHP code via a URL in the configArrpathtodir parameter...