BugTraq
PHP-Nuke module PHP-Banner-Exchange path disclosure May 18 2003 10:14AM
Lorenzo Manuel Hernandez Garcia-Hierro (security lorenzohgh com)


-------

Product: PHP-Nuke

Vendor: F.Burzi

Module: PHP-Banner Exchange

Version: 1.2

-------

Accessing directly to the PHP Banner Exchange module and without a

specified file :

http://[target]/modules/phpbannerexchange/

( phpbannerexchange module directory )

you get this:

Warning: main(mainfile.php) [function.main]: failed to create stream: No

such file or directory in /home/phpnuke-

/public_html/modules/phpbannerexchange/index.php on line 20

Fatal error: main() [function.main]: Failed opening

required 'mainfile.php' (include_path='') in /home/phpnuke-

/public_html/modules/phpbannerexchange/index.php on line 20

(Paths related your local paths in your server)

---------

SOLUTION:

---------

Configure your php.ini errors flags or by hand-editing the original

module files .

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus