BugTraq
Back to list
|
Post reply
MyBB 1.2 Local File Incusion
Jan 30 2006 10:38AM
o y 6 hotmail com, | securityfocus com,D3vil-0x1 securityfocus com
#### D3vil-0x1 MyBB Bug ###
## Local File Inclusion
##
## MyBB 1.2 -> Admin Can Include Local File :)
## File :- admin/plugins.php
Line :- 51
//*
if($mybb->input['action'] == "activate")
{
$codename = $mybb->input['plugin']; << Input From POST
$file = $codename.".php"; << Set File Type [ we can remove the type by NULL ( %00 ) ]
if($mybb->input['activate'])
{
.....
.....
}
elseif($mybb->input['deactivate'])
{
.....
.....
}
include "./inc/plugins/$file"; << Include BIG BUG :P
*//
#---------------------------------------------------------#
[ reply ]
Privacy Statement
Copyright 2010, SecurityFocus
## Local File Inclusion
##
## MyBB 1.2 -> Admin Can Include Local File :)
## File :- admin/plugins.php
Line :- 51
//*
if($mybb->input['action'] == "activate")
{
$codename = $mybb->input['plugin']; << Input From POST
$file = $codename.".php"; << Set File Type [ we can remove the type by NULL ( %00 ) ]
if($mybb->input['activate'])
{
.....
.....
}
elseif($mybb->input['deactivate'])
{
.....
.....
}
include "./inc/plugins/$file"; << Include BIG BUG :P
*//
#---------------------------------------------------------#
[ reply ]