Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Re: [Full-disclosure] ashnews Cross-Site Scripting Vulnerability |
|---|---|
| Date: | Mon, 30 Jan 2006 21:47:40 -0500 |
On Tue, Jan 31, 2006 at 12:50:05AM +0000, Dan B UK wrote:
Did you even look at the source code for this script. If you had then you would see that in the case of register_global's being turned on there is a bigger issue to worry about; Remote/Local File Inclusion - Server side.
Is this different from what Phil Dunn reported 2.5 years ago? http://www.securityfocus.com/archive/1/329910 George -- theall@tifaware.com
pgpxoclojYsq1.pgp
Description: PGP signature
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | Etomite followup information, security curmudgeon |
|---|---|
| Next by Date: | [Full-disclosure] Proof of concept for CommuniGate Pro Server vulnerability, Evgeny Legerov |
| Previous by Thread: | Re: [Full-disclosure] ashnews Cross-Site Scripting Vulnerability, Dan B UK |
| Next by Thread: | Re: [Full-disclosure] ashnews Cross-Site Scripting Vulnerability, DanB-FD |
| Indexes: | [Date] [Thread] [Top] [All Lists] |