Bugtraq mailing list archives
MyBB 1.2 Local File Incusion
From: o.y.6 () hotmail com, ""@securityfocus.com, D3vil-0x1 () securityfocus com
Date: 30 Jan 2006 10:38:29 -0000
Invalid characters removed from From: o.y.6 () hotmail com, |@securityfocus.com, #### D3vil-0x1 MyBB Bug ### ## Local File Inclusion ## ## MyBB 1.2 -> Admin Can Include Local File :) ## File :- admin/plugins.php Line :- 51 //* if($mybb->input['action'] == "activate") { $codename = $mybb->input['plugin']; << Input From POST $file = $codename.".php"; << Set File Type [ we can remove the type by NULL ( %00 ) ] if($mybb->input['activate']) { ..... ..... } elseif($mybb->input['deactivate']) { ..... ..... } include "./inc/plugins/$file"; << Include BIG BUG :P *// #---------------------------------------------------------#
Current thread:
- MyBB 1.2 Local File Incusion (Jan 30)