OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: DotClear Full Path Disclosure Vulnerability

From: Cedric Blancher (blanchercartel-securite.fr)
Date: Mon Feb 12 2007 - 15:28:46 CST

Le dimanche 11 février 2007 à 23:20 +0000, raphael.huckfree.fr a
écrit :
> Fatal error: Call to a member function fetch() on a non-object in
> /home/users/xxxx/dotclear/themes/xxx/list.php on line 34

Note it's not wise to display errors on a production website. However,
when hosted, you don't necessarily have this choice...

--
http://sid.rstack.org/
PGP KeyID: 157E98EE FingerPrint: FA62226DA9E72FA8AECAA240008B480E157E98EE
>> Hi! I'm your friendly neighbourhood signature virus.
>> Copy me to your signature file and help me spread!