bugtraq - Re: Phpjobscheduler 3.0 - Multiple Remote File Include

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <814b9d50611181348t1deec39el3ac007402fd1c791@mail.gmail.com>
Date: Sat, 18 Nov 2006 15:48:12 -0600
From: str0ke <str0ke@...w0rm.com>
To: "Stefano Zanero" <s.zanero@...urenetwork.it>
Cc: bugtraq@...urityfocus.com
Subject: Re: Phpjobscheduler 3.0 - Multiple Remote File Include

On 11/18/06, Stefano Zanero <s.zanero@...urenetwork.it> wrote:
> Firewall1954@...mail.com wrote:
>
> > # Phpjobscheduler 3.0  - Multiple Remote File Include by Firewall
>
> Bogus
>
> > # Code:
> >                    include_once($installed_config_file)
>
> include_once("functions.php"); some lines above includes a file which
> statically sets that variable, so
>
> > # ExPloit :
>
> None of these work.
>
> Please stop reporting bogus vulnerabilities ! Thanks !
>
> Stefano
>

$installed_config_file = "config.inc.php";
if ($_REQUEST) foreach ($_REQUEST AS $key => $value) $$key = $value;

The line below the variable being defined is what makes this vulnerable.

Be safe,
/str0ke