PHP-Nuke Nederland Forums-viewtopic-[FIX] Handmatig upgraden van 2.0.13 -> 2.0.14

PHP-Nuke Nederland: Forums

PHP-Nuke Nederland :: View topic - [Fix] - phpbb_root_path Arbitrary File Inclusion (Critical)

Forum FAQ • Search • Memberlist • Usergroups • Register • • Profile • Log in to check your private messages • Log in

[Fix] - phpbb_root_path Arbitrary File Inclusion (Critical)

PHP-Nuke Nederland Forum Index » Bugs / Fixes

Author

Message

kenwood
Moderator

Joined: Sep 07, 2004
Posts: 246

Posted: Sat 07 May 2005 3:51

Fix voor BBtoNuke 2.0.14

Open modules/Forums/admin/pagestart.php and find:

Code:

define('FORUM_ADMIN', true);
include("../../../mainfile.php");
include($phpbb_root_path.'common.'.$phpEx);

Replace with:

Code:

define('FORUM_ADMIN', true);
define("PHPBB_ROOT_PATH", $phpbb_root_path);
define("PHPBB_PHPEX", $phpEx);
include("../../../mainfile.php");
$phpbb_root_path = PHPBB_ROOT_PATH;
$phpEx = PHPBB_PHPEX;
include($phpbb_root_path.'common.'.$phpEx);

Original advisory: http://secunia.com/advisories/15244/

BlueLion
Administrator

Joined: Aug 21, 2004
Posts: 2836

Posted: Sat 07 May 2005 6:40

Thx, kenwood. Ben er nog niet helemaal achter wat dit doet/verhelpt.

BL

Donaties

Adverteren

Wilt u het forum steunen, dan kunt u nu eenvoudig doneren met PayPal.

PHP-Nuke Nederland Forum Index » Bugs / Fixes

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Forums ©


All logos and trademarks in this site are property of their respective owner. The comments are property of their posters, all the rest © 2004-2008 by BlueLion. SEO enhanced with the Sitemapper script You can syndicate our news using the file backend.php or ultramode.txt PHP-Nuke Copyright © 2004 by Francisco Burzi. This is free software, and you may redistribute it under the GPL. PHP-Nuke comes with absolutely no warranty, for details, see the license. Pagina rendering: 0.23 seconden	RSS Feeds:
:: fisubsilver shadow phpbb2 style by Daz :: PHP-Nuke theme by BlueLion ::