<<< Date Index >>> <<< Thread Index >>>

Re: [ECHO_ADV_27$2006] Indexu <= 5.0.1 Remote File Inclusion

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: [ECHO_ADV_27$2006] Indexu <= 5.0.1 Remote File Inclusion
From: robert@xxxxxxxxxxxxx
Date: 13 Apr 2006 22:23:28 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

I changed $base_path to the hard coded path to all locations in application.php 
and hopefully that should sanitize my site. comments?

Prev by Date: planetSearch+ - XSS Vulnerabilities
Next by Date: Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotaged hosts-file lookup
Previous by thread: [ECHO_ADV_27$2006] Indexu <= 5.0.1 Remote File Inclusion
Next by thread: [security bulletin] SSRT051007 rev.2 - HP Tru64 UNIX Running DNS BIND4/BIND8 with Forwarders: Remote Unauthorized Privileged Access
Index(es):
- Date
- Thread