Bugtraq mailing list archives
Re: REMOTE FILE INCLUSION ( ALL )
From: eufrato () gmail com
Date: 14 Jun 2006 09:54:44 -0000
http://www.root-security.org/danger/boastMachine.txt Was this tried on a running site?or was this just source inspected? in boastmachine folder, the below shouldn't be vulnerable with config.php declaring $bmc_dir. vote.php -------------------------------------- include_once dirname(__FILE__)."/config.php"; include_once dirname(__FILE__)."/$bmc_dir/main.php"; config.php -------------------------------------- $bmc_dir="bmc"; /K-159
Current thread:
- REMOTE FILE INCLUSION ( ALL ) SpC-x (Jun 13)
- <Possible follow-ups>
- Re: REMOTE FILE INCLUSION ( ALL ) Steven M. Christey (Jun 14)
- Re: REMOTE FILE INCLUSION ( ALL ) eufrato (Jun 18)