Ban v0.1 (bannieres.php) File Include Oct 27 2006 05:36PM
mahmood ali (mah_k_2000 hotmail com) (1 replies)
Re: Ban v0.1 (bannieres.php) File Include Oct 28 2006 12:40AM
Francesco Laurita (francesco francesco-laurita info)
mahmood ali ha scritto:
> In Line 13 :_
>
> include "$chemin/includes/connexion.php" ;
Please, read source code better!
At line 11 the variable $chemin is setted as "."

Line 11:
$chemin = "." ;

Hower a security issue could be found at line 26 and line 32 where a sql
injection is possible due to uncheked $id variable

Regards

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus