[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: PLS-Bannieres 1.21 (bannieres.php) File Include
- To: mahmood ali <mah_k_2000@xxxxxxxxxxx>, bugtraq@xxxxxxxxxxxxxxxxx
- Subject: Re: PLS-Bannieres 1.21 (bannieres.php) File Include
- From: Stefano Zanero <s.zanero@xxxxxxxxxxxxxxxx>
- Date: Wed, 01 Nov 2006 16:29:09 +0100
mahmood ali wrote:
> PLS-Bannieres 1.21 (bannieres.php) File Include
> modules/bannieres/bannieres.php
> In Line 13 :_
>
> include "$chemin/includes/connexion.php" ;
Including ONE (1) more line of code:
$chemin = "." ;
include "$chemin$chemin/includes/connexion.php" ;
...
Another example of untested BOGUS vuln advisory...
Stefano