Re: gnopaste <= 0.5.3 (index.php) Remote File Include Vulnerability

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: gnopaste <= 0.5.3 (index.php) Remote File Include Vulnerability

Subject: Re: gnopaste <= 0.5.3 (index.php) Remote File Include Vulnerability
Date: Mon, 29 Jan 2007 23:48:10 +0100
From: Francesco Laurita <suppressed>

suppressed ha scritto:
> index.php
>
> include(GNP_REAL_PATH . 'includes/common.php');
>
>   
Bogus!
First: GNP_REAL_PATH is a constant which means it has an unchangeable
value (RTM)
Second: GNP_REAL_PATH is setted on line #39 (Open your eyes)

Regards
--
Francesco Laurita

References:
- gnopaste <= 0.5.3 (index.php) Remote File Include Vulnerability
  - From: trzindan

Prev by Date: rPSA-2007-0020-2 rmake
Next by Date: PhP Generic library & framework (include_path) Remote File Include Exploit
Previous by thread: gnopaste <= 0.5.3 (index.php) Remote File Include Vulnerability
Next by thread: AdMentor (banners) admin SQL injection
Index(es):
- Date
- Thread

Mail converted by mhonarc 2.6.15
This archive provided courtesy of JSW4.NET, Internet Hosting Services for Small Business.