Bugtraq mailing list archives

Re: phpWebSite 0.10.2 Remote File Include Vulnerabilities

From: kevin () tux appstate edu
Date: 11 Oct 2006 00:19:40 -0000

This is a falsified vulnerability. PHPWS_SOURCE_DIR and PHPWS_HOME_DIR are defined constants, not variables, and 
passing values in the URL has no effect on their value inside phpWebSite.

Current thread:

phpWebSite 0.10.2 Remote File Include Vulnerabilities crackers_child (Oct 10)
- <Possible follow-ups>
- Re: phpWebSite 0.10.2 Remote File Include Vulnerabilities kevin (Oct 11)