bugtraq - Re: [DSECRG-08-035] Local File Include Vulnerability in Gallery 1.5.7, 1.6-alpha3

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20080810201339.23168.qmail@securityfocus.com>
Date: 10 Aug 2008 20:13:39 -0000
From: o_0.iahumeil@...oo.com
To: bugtraq@...urityfocus.com
Subject: Re: [DSECRG-08-035] Local File Include Vulnerability in Gallery
 1.5.7, 1.6-alpha3

not vulnerable
define ("LOADED_AS_MODULE","1");
$phpbb_root_path = "./";
// connect to phpbb
include_once($phpbb_root_path . 'extension.inc');
include_once($phpbb_root_path . 'common.'.$phpEx);
include_once($phpbb_root_path . 'includes/functions.'.$phpEx);

$phpEX is defined in extension.inc