Waraxe IT Security Portal

Jeruvy · Replies: 9

dissable the
No, this is not option.

Why?

Same thing could appears in guestbook or somethine else.

Example?

And we have to leave ability to include

Then don't mess with it. I'm ...

Jeruvy · Replies: 7

Even if it's a local variable, it still can be used for XSS

Call me skeptical but I'd like to see a PoC.

Thanks,

Jeruvy · Replies: 1

Could you post this on the coppermine forum?

I don't know the url off hand, but you can also post any bugs here:

http://www.cpgnuke.com/Forums2/viewforum/f=4.html

AFAIK, most published holes ...

Jeruvy · Replies: 18

I wonder if this may be the reason...

if (!defined('ADMIN_PAGES')) { header('Location: ../../'); exit; }

J.

Jeruvy · Replies: 31

You need 6+ days to crack 8 character long password md5 hash.. Surprised

6 days!?!?!?? you need to read more.. Wink

With some real dictionary hashes, it should take an hour or so =)

l0phtcrack wil ...

Jeruvy · Replies: 4

Hi waraxe,

My first post on the board, but you've certainly seen my feedback on your disclosures.

This patch breaks several websites.

The problem is the setting of

$modpath = '';

If ...