Bugtraq mailing list archives
Fullpath disclosure in roundcube webmail
From: king_purba () yahoo co uk
Date: 17 Dec 2005 19:43:19 -0000
I try this request in my mailbox http://xxxx.com/roundcube/?_auth=3Dcf559dcf52d8801ccd51cd1f3ba3eca08d1b0bce= &_task=3Dma%60il then roundcube shows this warning **PHP Error in /usr/local/apache2/htdocs/roundcube/index.php (301)*:* Invalid request failed/file not found The requested page was not found! Please contact your server-administrator. *Failed request:* http://xxxx.com/roundcube/?_auth=3Dcf559dcf52d8801ccd51cd1f3ba3eca08d1b0bce= &_task=3Dma%60il
Current thread:
- Fullpath disclosure in roundcube webmail king_purba (Dec 17)
- <Possible follow-ups>
- Re: Fullpath disclosure in roundcube webmail Steven M. Christey (Dec 17)