Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
BugTraq
Advanced Guestbook <=- 2.4.2 (include_path) Remote File Include Vulnerability Jan 23 2007 08:52AM
me you (r 5 7 hotmail com) (1 replies)
Re: Advanced Guestbook <=- 2.4.2 (include_path) Remote File Include Vulnerability Jan 24 2007 10:09AM
Stefano Zanero (s zanero securenetwork it)
> Advanced Guestbook <=- 2.4.2 (include_path) Remote File Include
> Vulnerability

Bogus

> code :.
>
> require_once $include_path."/admin/config.inc.php";
> require_once $include_path."/lib/$DB_CLASS";
> require_once $include_path."/lib/image.class.php";
> require_once $include_path."/lib/template.class.php";

Line above:
$include_path = dirname(__FILE__);

So your proposed "exploit" does not work.

Please STOP reporting fake web vulns.

Stefano

[ reply ]




 

Privacy Statement
Copyright 2009, SecurityFocus