[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Advanced Guestbook <=- 2.4.2 (include_path) Remote File Include Vulnerability
- To: me you <r.5.7@xxxxxxxxxxx>, bugtraq@xxxxxxxxxxxxxxxxx
- Subject: Re: Advanced Guestbook <=- 2.4.2 (include_path) Remote File Include Vulnerability
- From: Stefano Zanero <s.zanero@xxxxxxxxxxxxxxxx>
- Date: Wed, 24 Jan 2007 11:09:39 +0100
> Advanced Guestbook <=- 2.4.2 (include_path) Remote File Include
> Vulnerability
Bogus
> code :.
>
> require_once $include_path."/admin/config.inc.php";
> require_once $include_path."/lib/$DB_CLASS";
> require_once $include_path."/lib/image.class.php";
> require_once $include_path."/lib/template.class.php";
Line above:
$include_path = dirname(__FILE__);
So your proposed "exploit" does not work.
Please STOP reporting fake web vulns.
Stefano