Path Disclosure in Turba of Horde

From: Lorenzo Manuel Hernandez Garcia-Hierro (securityat_private)
Date: Sat May 17 2003 - 06:18:59 PDT

Next message: Lorenzo Manuel Hernandez Garcia-Hierro: "PHP-Nuke code injection in Yearly Stats at Statistics module"

Previous message: 0x36: "Buffer overflow vulnerability found in MailMax version 5"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

('binary' encoding is not supported, stored as-is) There is a path disclosure in status.php of Turba module at Horde 2.1, you get this: Fatal error: Call to a member function on a non-object in /opt/local/apache/htdocs/horde/turba/status.php on line 12 NOTE: i observed that this only occur in Turba....

Next message: Lorenzo Manuel Hernandez Garcia-Hierro: "PHP-Nuke code injection in Yearly Stats at Statistics module"
Previous message: 0x36: "Buffer overflow vulnerability found in MailMax version 5"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Sat May 17 2003 - 11:08:20 PDT