Bugtraq mailing list archives
Re: phpAdsNew-2.0.8 <= (adlayer.php) Remote File Include
From: emme0032 () umn edu
Date: 28 Oct 2006 01:48:13 -0000
Sorry this report is bogus.. the only require/include statement that utilizes that variable is line 188: require(phpAds_path.'/libraries/layerstyles/'.$layerstyle.'/layerstyle.inc.php'); The only possibility is local file include, with null byte bug in php interpreter. But local file include is thwarted with a regular expression.
Current thread:
- phpAdsNew-2.0.8 <= (adlayer.php) Remote File Include zooz_998 (Oct 27)
- <Possible follow-ups>
- Re: phpAdsNew-2.0.8 <= (adlayer.php) Remote File Include emme0032 (Oct 28)
- Re: phpAdsNew-2.0.8 <= (adlayer.php) Remote File Include simo (Oct 30)