lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Date: 16 Jan 2007 16:50:48 -0000
From: krasza@...il.com
To: bugtraq@...urityfocus.com
Subject: Re: Gallery <= 1.4.4-pl4 (phpbb_root_path) Remote File Include
 Vulnerability

Hi,
Yeah ,  you are the best ;[
P.S:It is fake bug, because 
"(...)

$phpbb_root_path = "./";

(...)"
(http://www.google.com/codesearch?hl=pl&q=show:QzeIQQZQ7BQ:h8q8TE-XBMQ:Ex0tElneoM4&sa=N&ct=rd&cs_p=http://www.pottum.nl/gallery_web/gallery-1.4.4-pl4-sms9.tar.gz&cs_f=gallery/contrib/phpBB2/modules.php)

P.S2:When you publish something like that, I say "What an idiot!?"
-- 
Best degradation , Maciej `krasza` Kukla

Powered by blists - more mailing lists