[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: dev_wms => 1.5 Remote File Include Vulnerabilities

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: dev_wms => 1.5 Remote File Include Vulnerabilities
From: Stefano Zanero <s.zanero@xxxxxxxxxxxxxxxx>
Date: Fri, 17 Nov 2006 20:23:28 +0100
Delivered-to: mailing list bugtraq@xxxxxxxxxxxxxxxxx
Delivered-to: moderator for bugtraq@xxxxxxxxxxxxxxxxx
In-reply-to: <20061116085516.8345.qmail@xxxxxxxxxxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
Organization: Secure Network S.r.l.
References: <20061116085516.8345.qmail@xxxxxxxxxxxxxxxxx>
User-agent: Thunderbird 1.5.0.8 (X11/20061112)

> # CodE : 
>   include $configuration->language_file;

Initialized above by including class_configuration.php. Bogus !

Stefano

References:
- dev_wms => 1.5 Remote File Include Vulnerabilities
  - From: the_3dit0r

Prev by Date: [ MDKSA-2006:214 ] - Updated gv packages fix buffer overflow vulnerability
Next by Date: A-Cart 2.0 SQL Injection
Previous by thread: dev_wms => 1.5 Remote File Include Vulnerabilities
Next by thread: discloser => 0.0.4 Remote File Include Vulnerability Exploit
Index(es):
- Date
- Thread