forum.coppermine-gallery.net

Dev Board => cpg1.4 Testing/Bugs => cpg1.4 Testing/Bugs: FIXED/CLOSED => Topic started by: Andi on December 15, 2004, 06:41:06 pm

Title: "full path disclosure" in several files
Post by: Andi on December 15, 2004, 06:41:06 pm

Hi :)

maybe it's better to lock the following files for directly access?

------------------------------------
Fatal error: Call to a member function add_action() on a non-object in FULLPATH_to_coppermine/devel/plugins/sample/codebase.php on line 21

------------------------------------
Warning: main(include/exif.php) [function.main]: failed to open stream: No such file or directory in FULLPATH_to_coppermine/include/exif_php.inc.php on line 21
Fatal error: main() [function.require]: Failed opening required 'include/exif.php' in FULLPATH_to_coppermine/include/exif_php.inc.php on line 21

------------------------------------
Warning: main(include/makers/nikon.php) [function.main]: failed to open stream: No such file or directory in FULLPATH_to_coppermine/include/exif.php on line 129
Warning: main() [function.include]: Failed opening 'include/makers/nikon.php' for inclusion in FULLPATH_to_coppermine/include/exif.php on line 129
Warning: main(include/makers/olympus.php) [function.main]: failed to open stream: No such file or directory in FULLPATH_to_coppermine/include/exif.php on line 130
Warning: main() [function.include]: Failed opening 'include/makers/olympus.php' for inclusion in FULLPATH_to_coppermine/include/exif.php on line 130
etc.....

------------------------------------
Fatal error: main() [function.require]: Failed opening required '' in FULLPATH_to_coppermine/bridge/yabbse.inc.php on line 56

------------------------------------
Warning: main(acp/lib/config.inc.php) [function.main]: failed to open stream: No such file or directory in FULLPATH_to_coppermine/bridge/woltlab21.inc.php on line 52
Fatal error: main() [function.require]: Failed opening required 'acp/lib/config.inc.php' in FULLPATH_to_coppermine/bridge/woltlab21.inc.php on line 52

------------------------------------
Warning: main(/smf_api.php) [function.main]: failed to open stream: No such file or directory in FULLPATH_to_coppermine/bridge/smf-api.inc.php on line 92
Fatal error: main() [function.require]: Failed opening required '/smf_api.php' in FULLPATH_to_coppermine/bridge/smf-api.inc.php on line 92

------------------------------------
Warning: main(/SSI.php) [function.main]: failed to open stream: No such file or directory in FULLPATH_to_coppermine/bridge/smf.inc.php on line 101
Fatal error: main() [function.require]: Failed opening required '/SSI.php' in FULLPATH_to_coppermine/bridge/smf.inc.php on line 101

------------------------------------
Warning: main(config.php) [function.main]: failed to open stream: No such file or directory in FULLPATH_to_coppermine/bridge/punbb12.inc.php on line 38
Fatal error: main() [function.require]: Failed opening required 'config.php' in FULLPATH_to_coppermine/bridge/punbb12.inc.php on line 38

------------------------------------
Fatal error: main() [function.require]: Failed opening required '' in FULLPATH_to_coppermine/bridge/punbb.inc.php on line 38

Title: Re: "full path disclosure" in several files
Post by: Joachim Müller on December 16, 2004, 10:49:53 am

added

Code: [Select]

if (!defined('IN_COPPERMINE')) die('Not in Coppermine...');to the files in question. Should fix this issue.

Joachim