Carsten Eilers
23/08/06, 01:40
Hi,
Outlaw@aria-security.net schrieb am Fri, 18 Aug 2006 04:29:06 +0000:
>#Software: mambo-phphop Product Scroller Module
I found no mambo-phphop, did you mean mambo-phpshop,
now VirtueMart: <http://www.mambo-phpshop.net/>=3F
I found no mod=5Fphpshop-Archive, so I tested some files
from the actual VirtueMart. They did the usual check for
direct calls (the lines
|=A0defined( '=5FVALID=5FMOS' ) or die( 'Direct Access to this
| location is not allowed.' );
near the top of each file). So there is no inclusion
possible.
Where did you find the archive with the reported vulnerable
code=3F I would like to take a look on it.
Regards
Carsten
--
Dipl.-Inform. Carsten Eilers
IT-Sicherheit und Datenschutz
<http://www.ceilers-it.de>
Outlaw@aria-security.net schrieb am Fri, 18 Aug 2006 04:29:06 +0000:
>#Software: mambo-phphop Product Scroller Module
I found no mambo-phphop, did you mean mambo-phpshop,
now VirtueMart: <http://www.mambo-phpshop.net/>=3F
I found no mod=5Fphpshop-Archive, so I tested some files
from the actual VirtueMart. They did the usual check for
direct calls (the lines
|=A0defined( '=5FVALID=5FMOS' ) or die( 'Direct Access to this
| location is not allowed.' );
near the top of each file). So there is no inclusion
possible.
Where did you find the archive with the reported vulnerable
code=3F I would like to take a look on it.
Regards
Carsten
--
Dipl.-Inform. Carsten Eilers
IT-Sicherheit und Datenschutz
<http://www.ceilers-it.de>