Bugtraq mailing list archives
Re: anjel Mambo Component Remote File Include
From: "Carsten Eilers" <ceilers-lists () gmx de>
Date: Sat, 19 Aug 2006 00:51:50 +0200
Hi, crackers_child () sibersavascilar com schrieb am Thu, 17 Aug 2006 21:09:36 +0000:
Bug İn anjel.index.php include_once( '../../globals.php' ); require_once( '../../configuration.php' ); require_once( $mosConfig_absolute_path . '/includes/joomla.php' );
$mosConfig_absolute_path is set in configuration.php, there is no way to manipulate it between the two line, so there is no vulnerability. Please take a look at <http://www.securityfocus.com/archive/1/443225/30/0/threaded> Regards Carsten -- Dipl.-Inform. Carsten Eilers IT-Sicherheit und Datenschutz <http://www.ceilers-it.de>
Current thread:
- anjel Mambo Component Remote File Include crackers_child (Aug 18)
- Re: anjel Mambo Component Remote File Include Carsten Eilers (Aug 22)