[VIM] true: months-old CentiPaid absolute_path RFI

Steven M. Christey coley at mitre.org
Wed Feb 7 16:07:36 EST 2007


Researcher: Kw3[R]Ln [ Romanian Security Team ]
Ref: http://www.milw0rm.com/exploits/2555

first line is:

  include($absolute_path.'/centipaid/adodb/adodb.inc.php');


NOTE - this is a different vector than OSVDB:31638, which was
disputed.


- Steve


More information about the VIM mailing list