full-disclosure - Re: 0DAY RFI in phpBB <= 2.0.22 HOT

lists.openwall.net		lists / announce john-users owl-users popa3d-users / xvendor oss-security / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4
Open Source and information security mailing list archives

This website is powered by Openwall GNU/*/Linux security-enhanced OS

[<prev] [next>] [<thread-prev] [month] [year] [list]

Date: Fri, 1 Jun 2007 20:38:56 +0200
From: "Slythers Bro" <slythers@...il.com>
To: "dr.rezen@...il.com" <dr.rezen@...il.com>
Subject: Re: 0DAY RFI in phpBB <= 2.0.22 HOT

i saw that in functions_post.php :

if (!defined <http://www.phpbb.de/doku/xref/_functions/defined.html>('IN_PHPBB
<http://www.phpbb.de/doku/xref/_constants/IN_PHPBB.html>'))
  {
       die('Hacking attempt');
  }

so this RFI can't work

[ CONTENT OF TYPE text/html SKIPPED ]

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/