[VIM] True: Flip-search-add-on everything.php incpath RFI
    Ferdy Riphagen 
    f.riphagen at nsec.nl
       
    Thu May  3 19:53:07 UTC 2007
    
    
  
Vuln: Flip-search-add-on everything.php incpath RFI
Link: http://seclists.org/bugtraq/2007/Apr/0225.html
Researcher: KaRTaL
Package is an add-on replacement code for the already existing 
"everything.php" in the Flip packages. A Flip package 2.x is needed to 
make it do something...
# everything.php
8   @include("options.php");
9   @include($incpath."users.php");
10 require_once($incpath."head.php");
Flip version 2.1.1 defines 'incpath'  in options.php, version 2.0.1 not, 
so it depends in the actual flip code used (I only found these two)
Additional, as from 11/2005 the project is announced more-or-less not in 
active development any more.
--Ferdy--
    
    
More information about the VIM
mailing list