lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Message-ID: <20060603101553.29140.qmail@securityfocus.com>
Date: 3 Jun 2006 10:15:53 -0000
From: nukedx@...edx.com
To: bugtraq@...urityfocus.com
Subject: Re: # MHG Security Team --- MyBloggie 2.1.1 version Remote File
 Include Vulnerabilit


This is not vulnerable,PHP-Nuke having a special in their files and when includes mainfile.php it overwrites the global variables and it caused to make an arbitrary file inclusion.
But in MyBloggie there is no common vulnerability like it.I checked all files and all versions did not see any vulnerability like you are given.
Regards,
Mustafa Can Bjorn IPEKCI


Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ