bugtraq - Re: wordpress plugins WP Super Cache v0.8.3 Remote File Inclusion Vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <d5d5430f0907230826o7aa463cfk7ad7a8da1bd2383b@mail.gmail.com>
Date: Thu, 23 Jul 2009 10:26:12 -0500
From: g30rg3_x <g30rg3x@...il.com>
To: "Cru3l.b0y" <cru3l.b0y@...il.com>
Cc: submit@...w0rm.com, staff@...ketstormsecurity.org,
	submissions@...ketstormsecurity.org, vuldb <vuldb@...urityfocus.com>,
	vuln <vuln@...unia.com>, bugtraq@...urityfocus.com
Subject: Re: wordpress plugins WP Super Cache v0.8.3 Remote File Inclusion 
	Vulnerability

Hi Cru3l.b0y,

$plugin came from $plugins array which is filled by the glob function
which find all " *.php " files that reside under " WPCACHEHOME .
'plugins/' "...
Snippet Code from wp-cache-phase1.php at version 0.8.3:
$plugins = glob( WPCACHEHOME . 'plugins/*.php' );
if( is_array( $plugins ) ) {
	foreach ( $plugins as $plugin ) {
	if( is_file( $plugin ) )
		require_once( $plugin );
	}
}

Therefore there is no exploitable security vulnerability.

Regards
PS: Version 0.8.3 is too old, next time try the latest stable version
(0.9.5 at the moment).

2009/7/22 Cru3l.b0y <cru3l.b0y@...il.com>:
> Hi Dear,
> I found a new bug. please publish it.
> thank you
> best regards
>
_________________________
             g30rg3_x