Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Squirrelmail local file inclusion Jun 01 2006 12:50AM
brokejunker yahoo com
Squirrelmail local file inclusion bug in functions/plugin.php .

Tested on the latest 1.4.x version.

No authentication needed.

if (isset($plugins) && is_array($plugins)) {

foreach ($plugins as $name) {

use_plugin($name);

}

...

function use_plugin ($name) {

if (file_exis...

[ more ]  




 

Privacy Statement
Copyright 2009, SecurityFocus