Menu

#262 FATAL ERROR in include\module_icon.php

2.2
closed-fixed
Legacy (179)
5
2010-05-15
2010-04-28
No

FATAL ERROR and Warning message with full path disclosure vulnerability when accessing directly the file \html\include\module_icon.php

---

<br />
<b>Warning</b>: require_once(../../mainfile.php) [<a href='function.require-once'>function.require-once</a>]: failed to open stream: No such file or directory in <b>XXX\html\include\module_icon.php</b> on line <b>3</b><br />
<br />
<b>Fatal error</b>: require_once() [<a href='function.require'>function.require</a>]: Failed opening required '../../mainfile.php' (include_path='.:/usr/share/pear;./XXX') in <b>XXX\html\include\module_icon.php</b> on line <b>3</b><br />

Discussion

  • minahito

    minahito - 2010-05-09
    • labels: --> Legacy
    • assigned_to: nobody --> kilica
    • status: open --> open-accepted
     
  • HIKAWA Kilica

    HIKAWA Kilica - 2010-05-15

    As module_icon.php is not used now, remove these files

     
  • HIKAWA Kilica

    HIKAWA Kilica - 2010-05-15
    • status: open-accepted --> closed-fixed
     

Log in to post a comment.