lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  PHC 
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Date: Mon, 7 Nov 2005 12:23:50 +0300 (MSK)
Subject: Path disclosure in CuteNews <= 1.4.0

A remote user can supply a specially crafted URL to
cause the system to display an error message that
discloses the installation path and other data.
Bug exists in "index.php".


failed to open stream: No such file or directory in
/storage/bg/myst/www/irc/cutenews/inc/ on line 268

Warning: Invalid argument supplied for foreach() in
/storage/bg/myst/www/irc/cutenews/inc/ on line 270
Can not find an article with id: 1128227686

Solution: Upgrade version 1.4.1

Original advisory:

Powered by blists - more mailing lists