Re: WebspotBlogging => 3.0 Remote File Include Vulnerabilities

To: h4ck3riran@xxxxxxxxx, bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: WebspotBlogging => 3.0 Remote File Include Vulnerabilities
From: "Steven M. Christey" <coley@xxxxxxxxx>
Date: Mon, 2 Oct 2006 18:42:28 -0400 (EDT)
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

These vectors were previosuly reported in June 2006 (CVE-2006-2860) by
Kacper in a milw0rm post (http://milw0rm.com/exploits/1871), for
version 3.0.1.

>> Www.Site.coM/[Path]/inc/mainheder.inc.php

This appears to be a mis-spelling of "mainheader.inc.php".

- Steve

Prev by Date: [ MDKSA-2006:178 ] - Updated ntp packages rebuilt against updated openssl.
Next by Date: Security flaw in IBM Client Security Password Manager
Previous by thread: WebspotBlogging => 3.0 Remote File Include Vulnerabilities
Next by thread: DanPHPSupport => 0.5 Cross Site Scripting Vulnerabilities
Index(es):
- Date
- Thread