Security News -  Security Reviews -   Exploits -  Tools -  UNIX Focus -  Windows Focus
SecuriTeam™  Beyond Security®  SecuriTeam™ Home  Ask the Team  Mailing Lists  Advertising Info  Blogs  Black Box Testing  Vulnerability Assessment  Vulnerability Scanner SecuriTeam™ in Your Inbox   E-mail this article to a friend New vulnerability? New tool? Tell us	Path Disclosure Bug in TOPo 26 Feb. 2003    Summary TOPo is a free TOP system written in PHP that works without a MySQL database. TOPo is specially designed for web sites hosted in web servers that do not offer a quality MySQL support. A vulnerability in the product allows attackers to reveal the true path of the PHP script files on the server.   Credit: Information was provided by Xyborg    Details Protect your website! Use an External Vulnerability Scanner! Nothing to install. First report in 1 hour! www.beyondsecurity.com/vulnerability-scanner Vulnerable versions:  * TOPo Version 1.43 and below Immune Versions:  * TOPo Version 2.0.081 and above. This vulenrability allows a user to read the full path to the in.php and out.php files' location. This is a security hazard, as it gives attackers restricted information about the structure of the hosting webserver. Example: http://host/[top_path]/in.php? http://host/[top_path]/out.php? http://host/[top_path]/in.php?id=any_word http://host/[top_path]/out.php?id=any_word http://host/[top_path]/in.php?any_word http://host/[top_path]/out.php?any_word The result will contain something like: Warning: mysql_num_rows(): supplied argument is not a valid MySQL result resource in /path/to/php/in.php on line 5 Warning ... Solution: Download the latest version from the site: TOPo Version 2.0.90  Comments:  Add new comment:  Subject:  Name/Nick/Email:          Chars Left:	All Sections Security News Unix focus Exploits Tools Windows focus Security Reviews  Related Articles WordPress MU wpmu-Blogs.php Crose Site Scrpting Vulnerability strongSwan IKEv2 Denial of Service Vulnerability Cross-Site Scripting Filter Evasion in Various Frameworks / Applications MySQL Charset Truncation Vulnerability Wordpress user_login Column SQL Truncation Vulnerability Joomla Weak Random Password Reset Token Vulnerability Linux Kernel SCTP-AUTH API Information Disclosure Vulnerability and NULL Pointer Dereferences WordPress SQL Column Truncation Vulnerability (PoC) Apache HTTP Server mod_proxy_ftp Wildcard Characters Cross-Site Scripting Dreambox DM500 Webserver Long URL Request Denial of Service Multiple Vulnerabilities in AWStats Totals vBulletin Cross Site Scripting Vulnerability (popup) Calendarix Basic Two SQL Injection Vulnerabilities Multiple Heap Overflows in Xine-Lib OpenLDAP BER Decoding Remote DoS Vulnerability  Featured Articles VMware Emulation Flaw x64 Guest Privilege Escalation WordPress MU wpmu-Blogs.php Crose Site Scrpting Vulnerability Google Docs (HTML code) Multiple Cross Site Scripting Vulnerabilities ABB PCU400 Buffer Overflow InstallShield Update Agent "Rule Script" Code Execution Vulnerability Cross-Site Scripting Filter Evasion in Various Frameworks / Applications Microsoft Windows WRITE_ANDX SMB Command Handling Kernel DoS
	Security News - Security Reviews - Exploits - Tools - UNIX Focus - Windows Focus - Blogs - CVEs

Copyright © 1998-2008 Beyond Security® All rights reserved.
Terms of Use Site Privacy Statement.
SecuriTeam™ is a trademark of Beyond Security®