Re: Re: Mambo Open Source, Path disclosure

[trueend5 () yahoo com]

You are right 
mamboserver soloution is available now:
The fix is easy,

in /component/com_content/content.php
Approx Line 190 Change the block FROM:


Code:
// Paramters
        $params = new stdClass();
        if ( $Itemid ) {
                $menu = new mosMenu( $database );
                $menu->load( $Itemid );
                $params =& new mosParameters( $menu->params );
        } else {
                $menu = "";
                $params =& new mosEmpty();

        }

CHANGE TO READ:

Code:
// Paramters
        $params = new stdClass();
        if ( $Itemid ) {
                $menu = new mosMenu( $database );
                $menu->load( $Itemid );
                $params =& new mosParameters( $menu->params );
        } else {
                $menu = "";
                $params =& new mosParameters(''); //mosEmpty();

        }
best regards
Alireza Hassani
Security Science Researchers Institute Of Iran
[http://www.KAPDA.ir]