bugtraq
[Top] [All Lists]

Re: Fake: Open Conference Systems = 2.8.2 Remote File Inclusion

To: bugtraq@securityfocus.com
Subject: Re: Fake: Open Conference Systems = 2.8.2 Remote File Inclusion
From: Michał Melewski <mike@carstein.kill-9.pl>
Date: Mon, 29 Jan 2007 22:26:54 +0100
Delivered-to: sp-com-lists@consult.net
Delivered-to: bugtraq-list@securepoint.com
Delivered-to: mailing list bugtraq@securityfocus.com
Delivered-to: moderator for bugtraq@securityfocus.com
In-reply-to: <1170098057.8264.5.camel@localhost>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@securityfocus.com; run by ezmlm
References: <20070127125238.14741.qmail@securityfocus.com> <24606-96161@sneakemail.com> <1170098057.8264.5.camel@localhost>
Dnia 29-01-2007, pon o godzinie 20:14 +0100, Michał Melewski napisał(a):
[..]
Consider my previous post an extreme bogus. Testing everything on
localhost machine is a very bad idea - but how many laptops you can
carry in a train. (this was not an RCE - however XSS is possible).

Sorry for making noise.

-- 
Michael "carstein" Melewski  |  "We have no future bacause our present  
carstein()7thguard.net       |  is too volatile. We have only risk 
mobile: 512 357 303          |  management. The spinning of the given 
JID: carstein()gentoo.pl     |  moment's scenarios. Pattern recognition.


<Prev in Thread] Current Thread [Next in Thread>