arfis

automated Remote File Inclusion search

RFI (0.3): openEngine September 14, 2007

Filed under: RFI — arfis @ 4:36 pm

Project Name: openEngine
Project Link: http://sourceforge.net/projects/openengine/
Project DL: http://surfnet.dl.sourceforge.net/sourceforge/openengine/openengine19_beta1.zip
RFI Info:
File: tmp/openengine19_beta1/openengine19/html/modules/extranet_profile/main.php
Line: 10
Vuln Code: include($this_module_path.”/profile_new.php”);

(found with version 0.3 – 3846 projects processed so far)

About these ads
 

 
Follow

Get every new post delivered to your Inbox.

Join 25 other followers