BugTraq
Back to list
|
Post reply
Re: RFI ====> vBulletin v3.6.5
Jul 31 2007 01:21PM
scott-REMOVE vbulletin com
I guess no one ever explained to you how an RFI works?
In order you've just listed.
1. $classfile comes from internal function calls and is only included if ^\w+$ matches.
2. $nextitem comes from a database row.
3. $specialtemplates isn't even used.
Rather than just searching for require_once / include_once in the code maybe actually read the context or even do some testing?
Scott MacVicar
Development Team, vBulletin
[ reply ]
Privacy Statement
Copyright 2010, SecurityFocus
In order you've just listed.
1. $classfile comes from internal function calls and is only included if ^\w+$ matches.
2. $nextitem comes from a database row.
3. $specialtemplates isn't even used.
Rather than just searching for require_once / include_once in the code maybe actually read the context or even do some testing?
Scott MacVicar
Development Team, vBulletin
[ reply ]