RE: Bug, or just strange? 04-23-2014, 01:37 AM
#9
(03-28-2014, 08:58 AM)Cressi Wrote: Oh, okay. Thanks for clearing that up ^^
Wtf man? No 0days in this thread? Disgraceful.
How about a challenge. Find this 'vulnerability' and tell us how to exploit it (things with * have been censored out)
Code:
$upgrade = $mybb->input['upgrade_file'];
require_once MYBB_ROOT."inc/plugins/******/upgrades/".$upgrade.".php";EDIT: Worried my theory doesnt work :3
REDIT: Stupid me, would only verify file existence.


![[+]](https://sinister.ly/images/modern/collapse_collapsed.png)