Bugtraq mailing list archives
Re: RFI ====> vBulletin v3.6.5
From: no-reply () aria-security net
Date: 31 Jul 2007 07:19:44 -0000
inclusion in Vbulletin 3.6.5? functions_forumdisplay.php / ###################### Start parseThreadData ####################### // translate stuff from the db into data for a template like threadbit // note: this function requires the use of $iconcache - include it in $specialtemplates! function process_thread_array($thread, $lastread = -1, $allowicons = -1) { As you see there is no File Inclusion. I dont see it, DO YOU? require_once(DIR . '/includes/class_dm_' . $classfile . '.php'); DIR . '/includes/class_dm. Please be careful next time you report a vuln. The-0utl4w
From Aria-Security Team
Current thread:
- RFI ====> vBulletin v3.6.5 RaeD (Jul 30)
- <Possible follow-ups>
- Re: RFI ====> vBulletin v3.6.5 scott-REMOVE (Jul 31)
- Re: RFI ====> vBulletin v3.6.5 no-reply (Jul 31)