[VIM] SimpleBoard sbp file inclusion - more info

Steven M. Christey coley at mitre.org
Tue Jul 11 19:04:51 EDT 2006



The milw0rm posting claims the bug was found in file_upload.php, but
the demonstration URL uses image_upload.php.  I did some source code
inspection that shows that the same statement:


appears at the top of both files.  Other files also have this
statement, but they include a check for direct requests using a
defined('_VALID_MOS') test.

- Steve

More information about the VIM mailing list