[geeklog-devel] 1.5 Installer stuff

[Joe Mucchiello]

At 11:06 PM 10/11/2007, Blaine Lang wrote:
>Joe Mucchiello wrote:
>>Example: 
>>http://example.com/geeklog/languages/english.php?_CONF[site_admin_url]=http://evil.com 
>>
>It  may be just late for me but I will ask the question anyways. 
>What vulnerability does the above create - as this is very different 
>then a remote file include vulnerbility. If someone wants to run 
>english.php and change $_CONF['site_admin_url'] - what are they 
>going to harm or see happen?

I don't claim there is a current vulnerability. I'm just saying that 
now there is the potential for code to run in language files. Today 
it's just a function call. Who knows what someone might be able to 
make that do at some point in the future. It doesn't hurt to add the 
"can't run this file" logic.

----
Joe Mucchiello
Throwing Dice Games
http://www.throwingdice.com