Re: Remote File Inclusion in forum PunBB

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: Remote File Inclusion in forum PunBB
From: arpen@xxxxxxxxxxxxxxxxx, home@xxxxxxxxxxxxxxxxx, se@xxxxxxxxxxxxxxxxx
Date: 29 Oct 2005 16:05:03 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

1. The bug is over a year old (see bid 10760).
2. The bug was fixed in 1.1.5, so that version is not vulnerable.
3. It was discovered by Radek Hulan, not "RoDheDoR".
4. The exploit detailed is copied directly from the old bid so "RoDheDoR" was 
obviously aware of it.

The nerve of some of these reporters never seizes to amaze me.

Prev by Date: Vulnerability in MG2 php based Image Gallery - bypass security, view password protected images
Next by Date: Re: Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability through
Previous by thread: Remote File Inclusion in forum PunBB
Next by thread: TSLSA-2005-0059 - multi
Index(es):
- Date
- Thread