bugtraq - Re: ToendaCMS <= 1.0.3 -(tcms_administer

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Thu, 24 Aug 2006 00:51:34 +0200
From: "Carsten Eilers" <ceilers-lists@....de>
To: <h4ck3riran@...oo.com>, <bugtraq@...urityfocus.com>
Subject: Re: ToendaCMS <= 1.0.3 -(tcms_administer_site) Remote File Include

Hi,

h4ck3riran@...oo.com schrieb am Sun, 20 Aug 2006 07:52:31 +0000:

>> ToendaCMS <= 1.0.3 -(tcms_administer_site) Remote File Include
>
>----------------------------------------------
>
>>
>
>>Source : 
>
>> include($tcms_administer_site.'/tcms_global/database.php')

This is from index.php?

Near the top of this script the variable is initalized:

| include_once('site.php');
| $tcms_administer_site = $tcms_site[0]['path'];

After that I found no way to manipulate $tcms_administer_site,
so I see no vulnerability.

Regards
  Carsten


-- 
Dipl.-Inform. Carsten Eilers
IT-Sicherheit und Datenschutz

<http://www.ceilers-it.de>