bugtraq - Re: adobe php sdk Remote File Include Vulnerabilities

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <453E87CC.9060406@expresshosting.net>
Date: Tue, 24 Oct 2006 16:38:20 -0500
From: Mailinglists Address <mailinglist@...resshosting.net>
To: bugtraq@...urityfocus.com
Subject: Re: adobe php sdk  Remote File Include Vulnerabilities


>
> www.site.com/adobe_php_sdk_path/libraries/amfphp/amf-core/custom/CachedGateway.php?AMFPHP_BASE=sh3ll?_
>
>
>
>   
All of these reports are bogus (Smarty 2.6.1, CSLH2), as the original
poster obviously does not understand how constants work.

As taken from the PHP manual:

"Constants may only be defined using the *define()*
<http://us3.php.net/manual/en/function.define.php> function, not by
simple assignment;"