mailing list archives
Re: phpAdsNew-2.0.8 <= (adlayer.php) Remote File Include
From: simo () morx org
Date: Sat, 28 Oct 2006 16:59:17 -0000 (GMT)
Already reported a year ago by Maksymilian Arciemowicz.
Sorry this report is bogus..
the only require/include statement that utilizes that variable is line
The only possibility is local file include, with null byte bug in php
But local file include is thwarted with a regular expression.
Simo Ben youssef
MorX Security Research Team