Bugtraq mailing list archives
Re: Advanced Guestbook <=- 2.4.2 (include_path) Remote File Include Vulnerability
From: Stefano Zanero <s.zanero () securenetwork it>
Date: Wed, 24 Jan 2007 11:09:39 +0100
Advanced Guestbook <=- 2.4.2 (include_path) Remote File Include Vulnerability
Bogus
code :. require_once $include_path."/admin/config.inc.php"; require_once $include_path."/lib/$DB_CLASS"; require_once $include_path."/lib/image.class.php"; require_once $include_path."/lib/template.class.php";
Line above: $include_path = dirname(__FILE__); So your proposed "exploit" does not work. Please STOP reporting fake web vulns. Stefano
Current thread:
- Advanced Guestbook <=- 2.4.2 (include_path) Remote File Include Vulnerability me you (Jan 23)
- Re: Advanced Guestbook <=- 2.4.2 (include_path) Remote File Include Vulnerability Stefano Zanero (Jan 24)