bugtraq - MyBB 1.2 Local File Incusion

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20060130103829.20699.qmail@securityfocus.com>
Date: 30 Jan 2006 10:38:29 -0000
From: o.y.6@...mail.com, @securityfocus.com,
	D3vil-0x1@...urityfocus.com
To: bugtraq@...urityfocus.com
Subject: MyBB 1.2 Local File Incusion


Invalid characters removed from From: o.y.6@...mail.com, |@...urityfocus.com,

#### D3vil-0x1 MyBB Bug ###
## Local File Inclusion
## 
## MyBB 1.2 -> Admin Can Include Local File :)

## File :- admin/plugins.php 
				
					Line :- 51
//*

	if($mybb->input['action'] == "activate")

	{

	$codename = $mybb->input['plugin']; << Input From POST

	$file = $codename.".php"; 				<< Set File Type [ we can remove the type by NULL ( %00 ) ]

	if($mybb->input['activate'])

	{

	.....
	.....

	}

	elseif($mybb->input['deactivate'])

	{

	.....
	.....

	}



	include "./inc/plugins/$file"; << Include BIG BUG :P

*//
#---------------------------------------------------------#