Re: Re: Phpjobscheduler 3.0 - Multiple Remote File Include

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: Re: Phpjobscheduler 3.0 - Multiple Remote File Include
From: admin@xxxxxxxxxxxxx
Date: 21 Nov 2006 17:29:34 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

Indeed!  It could offer a potential exploit.

I have released a patched version here:
http://www.dwalker.co.uk/forum/viewtopic.php?t=493

Firewall1954 (at) hotmail (dot) com - it is/would have been good practice to 
contact the developer (me) before publishing your find.
If you had approached me with the find like Philipp Niedziela did so a few 
months ago you would have received public credit for the find:
http://www.dwalker.co.uk/forum/viewtopic.php?t=517

Prev by Date: ContentNow CMS 1.39 Sql Injection + Path Disclosure Vulnerabilities
Next by Date: Link Exchange Lite [injection sql]
Previous by thread: ContentNow CMS 1.39 Sql Injection + Path Disclosure Vulnerabilities
Next by thread: Link Exchange Lite [injection sql]
Index(es):
- Date
- Thread