[Security Bug] Full Path Disclosure

If you are not registered or logged in, you may still use these forums but with limited features. Show recent topics

Search

[Hottest Topics]

Hottest Topics [Members]

[Members]

Member Listing [FAQ]

[FAQ]

FAQ

[Register]

Register /

[Security Bug] Full Path Disclosure

XML

Forum Index » Advanced Guestbook Forum

Author

Message

[Post New]

20/11/2005 22:11:53

Subject: [Security Bug] Full Path Disclosure

tandilboy
Newbie

Joined: 04/11/2005 15:58:43
Messages: 2
Offline

when i put this link in my browser the guestbook shows this error

http://proxy2.de/guestbook/picture.php?img=

this is a full path disclosure bug

FIX it

[Post New]

21/11/2005 09:48:57

Subject:

Carbonize
Master

Joined: 12/06/2003 19:26:08
Messages: 4292
Location: Bristol, UK
Offline

PHP always displays the full file path when it informs you of an error. What is the security risk?

Carbonize
I am not the maker of the Advanced Guestbook

get Lazarus

[Email]

[WWW]

[Yahoo!]

[MSN]

[ICQ]

Forum Index » Advanced Guestbook Forum

Based on the open source JForum