Bugtraq mailing list archives

Re: PLS-Bannieres 1.21 (bannieres.php) File Include

From: Stefano Zanero <s.zanero () securenetwork it>
Date: Wed, 01 Nov 2006 16:29:09 +0100

mahmood ali wrote:

PLS-Bannieres 1.21 (bannieres.php) File Include

modules/bannieres/bannieres.php

In Line 13 :_

include "$chemin/includes/connexion.php" ;


Including ONE (1) more line of code:

$chemin = "." ;
include "$chemin$chemin/includes/connexion.php" ;

...

Another example of untested BOGUS vuln advisory...

Stefano

Current thread:

Re: PLS-Bannieres 1.21 (bannieres.php) File Include Stefano Zanero (Nov 01)