Re: twlc advisory: all versions of php nuke are vulnerable...

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



>Alternative "quickfix"; change
>   "if($upload) {" to
>   "if (($upload) && ($admintest)) {"

To fix the $file/$file_name bug in admin.php, change the line
"if ((isset($file)) AND ($file != "none")) {"
to
"if ((isset($file)) AND ($file != "none") AND ($admintest)) {"

/B.S.


[Index of Archives]     [Linux Security]     [Netfilter]     [PHP]     [Yosemite News]     [Linux Kernel]

  Powered by Linux