OSDN > 軟體搜索 > Internet > WWW/HTTP > Dynamic Content > XOOPS > Ticket List/Search > 待辦事項 #10152

XOOPS

待辦事項 #10152
待辦事項列表 新增待辦事項  RSS

path disclosure (security)

啟用日期: 2007-03-23 07:11 最後更新: 2007-03-28 14:58

監視

回報者:

mikhail

負責人:

minahito

類型:

XOOPSCube2.1 Bugs

狀態:

關閉

元件:

(無)

里程碑:

(無)

優先權:

嚴重程度:

5 - 中

處理結果:

修正

檔案:

無

細節

Path Disclosure: There are a way (at lest one way) to
discover the full physical path of the web directory on
a server running XOOPS Cube. One way is by calling some
files directly as seen below:

http://yourserver/modules/legacy/admin/css.php

ps: I will write a tool for check and report all files
with this problem...

[]'s,

mikhail

Ticket History (3/5 Histories)

2007-03-23 08:54 Updated by: mikhail

優先權 Update from 5 - 中 to 8
(群組 change on Tracker)

2007-03-26 03:19 Updated by: mikhail

評語

Logged In: YES
user_id=24765

[quote]ps: I will write a tool for check and report all
files with this problem...[/quote]

61 files with the path disclosure problem (!!!)

details:
http://xoopscube.org/modules/xhnewbb/viewtopic.php?topic_id=400

Files/content:

----------------------------------------
Find 'path disclosure error' in '-> xoopsapi.php' :
-> xoopsapi.php(2): Warning:
main(XOOPS_ROOT_PATH/class/xml/rpc/xmlrpcapi.php): failed to
open stream: No such file or directory in
/home/www/class/xml/rpc/xoopsapi.php on line
32 
-> xoopsapi.php(4): Fatal error: main(): Failed
opening required
'XOOPS_ROOT_PATH/class/xml/rpc/xmlrpcapi.php'
(include_path='.:/usr/local/php-4.4.1/lib/php') in
/home/www/class/xml/rpc/xoopsapi.php on line
32 

----------------------------------------
Find 'path disclosure error' in '-> xoopsmultimailer.php' :
-> xoopsmultimailer.php(2): Warning:
main(XOOPS_ROOT_PATH/class/mail/phpmailer/class.phpmailer.php):
failed to open stream: No such file or directory in
/home/www/class/mail/xoopsmultimailer.php on line
46 
-> xoopsmultimailer.php(4): Fatal error: main():
Failed opening required
'XOOPS_ROOT_PATH/class/mail/phpmailer/class.phpmailer.php'
(include_path='.:/usr/local/php-4.4.1/lib/php') in
/home/www/class/mail/xoopsmultimailer.php on line
46 

----------------------------------------
Find 'path disclosure error' in '-> Smarty_Compiler.class.php' :
-> Smarty_Compiler.class.php(2): Fatal error: Class
smarty_compiler: Cannot inherit from undefined class smarty
in /home/www/class/smarty/Smarty_Compiler.class.php
on line 35 

----------------------------------------
Find 'path disclosure error' in '-> modifier.date_format.php' :
-> modifier.date_format.php(2): Fatal error: Call to
a member function on a non-object in
/home/www/class/smarty/plugins/modifier.date_format.php
on line 11 

----------------------------------------
Find 'path disclosure error' in '-> movabletypeapi.php' :
-> movabletypeapi.php(2): Warning:
main(XOOPS_ROOT_PATH/class/xml/rpc/xmlrpcapi.php): failed to
open stream: No such file or directory in
/home/www/class/xml/rpc/movabletypeapi.php on line
32 
-> movabletypeapi.php(4): Fatal error: main(): Failed
opening required
'XOOPS_ROOT_PATH/class/xml/rpc/xmlrpcapi.php'
(include_path='.:/usr/local/php-4.4.1/lib/php') in
/home/www/class/xml/rpc/movabletypeapi.php on line
32 

----------------------------------------
Find 'path disclosure error' in '-> xmlrpcparser.php' :
-> xmlrpcparser.php(2): Warning:
main(XOOPS_ROOT_PATH/class/xml/saxparser.php): failed to
open stream: No such file or directory in
/home/www/class/xml/rpc/xmlrpcparser.php on line
32 
-> xmlrpcparser.php(4): Fatal error: main(): Failed
opening required 'XOOPS_ROOT_PATH/class/xml/saxparser.php'
(include_path='.:/usr/local/php-4.4.1/lib/php') in
/home/www/class/xml/rpc/xmlrpcparser.php on line
32 

----------------------------------------
Find 'path disclosure error' in '-> bloggerapi.php' :
-> bloggerapi.php(2): Warning:
main(XOOPS_ROOT_PATH/class/xml/rpc/xmlrpcapi.php): failed to
open stream: No such file or directory in
/home/www/class/xml/rpc/bloggerapi.php on line
32 
-> bloggerapi.php(4): Fatal error: main(): Failed
opening required
'XOOPS_ROOT_PATH/class/xml/rpc/xmlrpcapi.php'
(include_path='.:/usr/local/php-4.4.1/lib/php') in
/home/www/class/xml/rpc/bloggerapi.php on line
32 

----------------------------------------
Find 'path disclosure error' in '-> metaweblogapi.php' :
-> metaweblogapi.php(2): Warning:
main(XOOPS_ROOT_PATH/class/xml/rpc/xmlrpcapi.php): failed to
open stream: No such file or directory in
/home/www/class/xml/rpc/metaweblogapi.php on line
32 
-> metaweblogapi.php(4): Fatal error: main(): Failed
opening required
'XOOPS_ROOT_PATH/class/xml/rpc/xmlrpcapi.php'
(include_path='.:/usr/local/php-4.4.1/lib/php') in
/home/www/class/xml/rpc/metaweblogapi.php on line
32 

----------------------------------------
Find 'path disclosure error' in '-> xmlrss2parser.php' :
-> xmlrss2parser.php(2): Warning:
main(XOOPS_ROOT_PATH/class/xml/saxparser.php): failed to
open stream: No such file or directory in
/home/www/class/xml/rss/xmlrss2parser.php on line
32 
-> xmlrss2parser.php(4): Fatal error: main(): Failed
opening required 'XOOPS_ROOT_PATH/class/xml/saxparser.php'
(include_path='.:/usr/local/php-4.4.1/lib/php') in
/home/www/class/xml/rss/xmlrss2parser.php on line
32 

----------------------------------------
Find 'path disclosure error' in '-> themesetparser.php' :
-> themesetparser.php(2): Warning:
main(XOOPS_ROOT_PATH/class/xml/saxparser.php): failed to
open stream: No such file or directory in
/home/www/class/xml/themesetparser.php on line
32 
-> themesetparser.php(4): Warning: main(): Failed
opening 'XOOPS_ROOT_PATH/class/xml/saxparser.php' for
inclusion (include_path='.:/usr/local/php-4.4.1/lib/php') in
/home/www/class/xml/themesetparser.php on line
32 
-> themesetparser.php(6): Warning:
main(XOOPS_ROOT_PATH/class/xml/xmltaghandler.php): failed to
open stream: No such file or directory in
/home/www/class/xml/themesetparser.php on line
33 
-> themesetparser.php(8): Warning: main(): Failed
opening 'XOOPS_ROOT_PATH/class/xml/xmltaghandler.php' for
inclusion (include_path='.:/usr/local/php-4.4.1/lib/php') in
/home/www/class/xml/themesetparser.php on line
33 
-> themesetparser.php(10): Fatal error: Class
xoopsthemesetparser: Cannot inherit from undefined class
saxparser in /home/www/class/xml/themesetparser.php
on line 35 

----------------------------------------
Find 'path disclosure error' in '-> formselectcountry.php' :
-> formselectcountry.php(2): Warning:
main(XOOPS_ROOT_PATH/class/xoopslists.php): failed to open
stream: No such file or directory in
/home/www/class/xoopsform/formselectcountry.php on
line 42 
-> formselectcountry.php(4): Warning: main(): Failed
opening 'XOOPS_ROOT_PATH/class/xoopslists.php' for inclusion
(include_path='.:/usr/local/php-4.4.1/lib/php') in
/home/www/class/xoopsform/formselectcountry.php on
line 42 
-> formselectcountry.php(6): Warning:
main(XOOPS_ROOT_PATH/class/xoopsform/formselect.php): failed
to open stream: No such file or directory in
/home/www/class/xoopsform/formselectcountry.php on
line 47 
-> formselectcountry.php(8): Warning: main(): Failed
opening 'XOOPS_ROOT_PATH/class/xoopsform/formselect.php' for
inclusion (include_path='.:/usr/local/php-4.4.1/lib/php') in
/home/www/class/xoopsform/formselectcountry.php on
line 47 
-> formselectcountry.php(10): Fatal error: Class
xoopsformselectcountry: Cannot inherit from undefined class
xoopsformselect in
/home/www/class/xoopsform/formselectcountry.php on
line 58 

----------------------------------------
Find 'path disclosure error' in '-> formselectgroup.php' :
-> formselectgroup.php(2): Warning:
main(XOOPS_ROOT_PATH/class/xoopsform/formselect.php): failed
to open stream: No such file or directory in
/home/www/class/xoopsform/formselectgroup.php on line
42 
-> formselectgroup.php(4): Warning: main(): Failed
opening 'XOOPS_ROOT_PATH/class/xoopsform/formselect.php' for
inclusion (include_path='.:/usr/local/php-4.4.1/lib/php') in
/home/www/class/xoopsform/formselectgroup.php on line
42 
-> formselectgroup.php(6): Fatal error: Class
xoopsformselectgroup: Cannot inherit from undefined class
xoopsformselect in
/home/www/class/xoopsform/formselectgroup.php on line
53 

----------------------------------------
Find 'path disclosure error' in '-> formselectlang.php' :
-> formselectlang.php(2): Warning:
main(XOOPS_ROOT_PATH/class/xoopslists.php): failed to open
stream: No such file or directory in
/home/www/class/xoopsform/formselectlang.php on line
41 
-> formselectlang.php(4): Warning: main(): Failed
opening 'XOOPS_ROOT_PATH/class/xoopslists.php' for inclusion
(include_path='.:/usr/local/php-4.4.1/lib/php') in
/home/www/class/xoopsform/formselectlang.php on line
41 
-> formselectlang.php(6): Warning:
main(XOOPS_ROOT_PATH/class/xoopsform/formselect.php): failed
to open stream: No such file or directory in
/home/www/class/xoopsform/formselectlang.php on line
45 
-> formselectlang.php(8): Warning: main(): Failed
opening 'XOOPS_ROOT_PATH/class/xoopsform/formselect.php' for
inclusion (include_path='.:/usr/local/php-4.4.1/lib/php') in
/home/www/class/xoopsform/formselectlang.php on line
45 
-> formselectlang.php(10): Fatal error: Class
xoopsformselectlang: Cannot inherit from undefined class
xoopsformselect in
/home/www/class/xoopsform/formselectlang.php on line
56 

----------------------------------------
Find 'path disclosure error' in '-> formselectmatchoption.php' :
-> formselectmatchoption.php(2): Warning:
main(XOOPS_ROOT_PATH/class/xoopsform/formselect.php): failed
to open stream: No such file or directory in
/home/www/class/xoopsform/formselectmatchoption.php
on line 41 
-> formselectmatchoption.php(4): Warning: main():
Failed opening
'XOOPS_ROOT_PATH/class/xoopsform/formselect.php' for
inclusion (include_path='.:/usr/local/php-4.4.1/lib/php') in
/home/www/class/xoopsform/formselectmatchoption.php
on line 41 
-> formselectmatchoption.php(6): Fatal error: Class
xoopsformselectmatchoption: Cannot inherit from undefined
class xoopsformselect in
/home/www/class/xoopsform/formselectmatchoption.php
on line 52 

----------------------------------------
Find 'path disclosure error' in '-> formselecttheme.php' :
-> formselecttheme.php(2): Warning:
main(XOOPS_ROOT_PATH/class/xoopslists.php): failed to open
stream: No such file or directory in
/home/www/class/xoopsform/formselecttheme.php on line
41 
-> formselecttheme.php(4): Warning: main(): Failed
opening 'XOOPS_ROOT_PATH/class/xoopslists.php' for inclusion
(include_path='.:/usr/local/php-4.4.1/lib/php') in
/home/www/class/xoopsform/formselecttheme.php on line
41 
-> formselecttheme.php(6): Warning:
main(XOOPS_ROOT_PATH/class/xoopsform/formselect.php): failed
to open stream: No such file or directory in
/home/www/class/xoopsform/formselecttheme.php on line
45 
-> formselecttheme.php(8): Warning: main(): Failed
opening 'XOOPS_ROOT_PATH/class/xoopsform/formselect.php' for
inclusion (include_path='.:/usr/local/php-4.4.1/lib/php') in
/home/www/class/xoopsform/formselecttheme.php on line
45 
-> formselecttheme.php(10): Fatal error: Class
xoopsformselecttheme: Cannot inherit from undefined class
xoopsformselect in
/home/www/class/xoopsform/formselecttheme.php on line
56 

----------------------------------------
Find 'path disclosure error' in '-> formselecttimezone.php' :
-> formselecttimezone.php(2): Warning:
main(XOOPS_ROOT_PATH/class/xoopslists.php): failed to open
stream: No such file or directory in
/home/www/class/xoopsform/formselecttimezone.php on
line 42 
-> formselecttimezone.php(4): Warning: main(): Failed
opening 'XOOPS_ROOT_PATH/class/xoopslists.php' for inclusion
(include_path='.:/usr/local/php-4.4.1/lib/php') in
/home/www/class/xoopsform/formselecttimezone.php on
line 42 
-> formselecttimezone.php(6): Warning:
main(XOOPS_ROOT_PATH/class/xoopsform/formselect.php): failed
to open stream: No such file or directory in
/home/www/class/xoopsform/formselecttimezone.php on
line 46 
-> formselecttimezone.php(8): Warning: main(): Failed
opening 'XOOPS_ROOT_PATH/class/xoopsform/formselect.php' for
inclusion (include_path='.:/usr/local/php-4.4.1/lib/php') in
/home/www/class/xoopsform/formselecttimezone.php on
line 46 
-> formselecttimezone.php(10): Fatal error: Class
xoopsformselecttimezone: Cannot inherit from undefined class
xoopsformselect in
/home/www/class/xoopsform/formselecttimezone.php on
line 57 

----------------------------------------
Find 'path disclosure error' in '-> formselectuser.php' :
-> formselectuser.php(2): Warning:
main(XOOPS_ROOT_PATH/class/xoopsform/formselect.php): failed
to open stream: No such file or directory in
/home/www/class/xoopsform/formselectuser.php on line
42 
-> formselectuser.php(4): Warning: main(): Failed
opening 'XOOPS_ROOT_PATH/class/xoopsform/formselect.php' for
inclusion (include_path='.:/usr/local/php-4.4.1/lib/php') in
/home/www/class/xoopsform/formselectuser.php on line
42 
-> formselectuser.php(6): Fatal error: Class
xoopsformselectuser: Cannot inherit from undefined class
xoopsformselect in
/home/www/class/xoopsform/formselectuser.php on line
55 

----------------------------------------
Find 'path disclosure error' in '-> formtextarea.php' :
-> formtextarea.php(2): Fatal error: Class
xoopsformtextarea: Cannot inherit from undefined class
xoopsformelement in
/home/www/class/xoopsform/formtextarea.php on line
49 

----------------------------------------
Find 'path disclosure error' in '-> formtextdateselect.php' :
-> formtextdateselect.php(2): Fatal error: Class
xoopsformtextdateselect: Cannot inherit from undefined class
xoopsformtext in
/home/www/class/xoopsform/formtextdateselect.php on
line 49 

----------------------------------------
Find 'path disclosure error' in '-> formtoken.php' :
-> formtoken.php(2): Fatal error: Class
xoopsformtoken: Cannot inherit from undefined class
xoopsformhidden in
/home/www/class/xoopsform/formtoken.php on line
10 

----------------------------------------
Find 'path disclosure error' in '-> grouppermform.php' :
-> grouppermform.php(2): Warning:
main(XOOPS_ROOT_PATH/class/xoopsform/formelement.php):
failed to open stream: No such file or directory in
/home/www/class/xoopsform/grouppermform.php on line
31 
-> grouppermform.php(4): Fatal error: main(): Failed
opening required
'XOOPS_ROOT_PATH/class/xoopsform/formelement.php'
(include_path='.:/usr/local/php-4.4.1/lib/php') in
/home/www/class/xoopsform/grouppermform.php on line
31 

----------------------------------------
Find 'path disclosure error' in '-> simpleform.php' :
-> simpleform.php(2): Warning:
main(XOOPS_ROOT_PATH/class/xoopsform/form.php): failed to
open stream: No such file or directory in
/home/www/class/xoopsform/simpleform.php on line
44 
-> simpleform.php(4): Warning: main(): Failed opening
'XOOPS_ROOT_PATH/class/xoopsform/form.php' for inclusion
(include_path='.:/usr/local/php-4.4.1/lib/php') in
/home/www/class/xoopsform/simpleform.php on line
44 
-> simpleform.php(6): Fatal error: Class
xoopssimpleform: Cannot inherit from undefined class
xoopsform in /home/www/class/xoopsform/simpleform.php
on line 55 

----------------------------------------
Find 'path disclosure error' in '-> tableform.php' :
-> tableform.php(2): Warning:
main(XOOPS_ROOT_PATH/class/xoopsform/form.php): failed to
open stream: No such file or directory in
/home/www/class/xoopsform/tableform.php on line
43 
-> tableform.php(4): Warning: main(): Failed opening
'XOOPS_ROOT_PATH/class/xoopsform/form.php' for inclusion
(include_path='.:/usr/local/php-4.4.1/lib/php') in
/home/www/class/xoopsform/tableform.php on line
43 
-> tableform.php(6): Fatal error: Class
xoopstableform: Cannot inherit from undefined class
xoopsform in /home/www/class/xoopsform/tableform.php
on line 56 

----------------------------------------
Find 'path disclosure error' in '-> themeform.php' :
-> themeform.php(2): Warning:
main(XOOPS_ROOT_PATH/class/xoopsform/form.php): failed to
open stream: No such file or directory in
/home/www/class/xoopsform/themeform.php on line
43 
-> themeform.php(4): Warning: main(): Failed opening
'XOOPS_ROOT_PATH/class/xoopsform/form.php' for inclusion
(include_path='.:/usr/local/php-4.4.1/lib/php') in
/home/www/class/xoopsform/themeform.php on line
43 
-> themeform.php(6): Fatal error: Class
xoopsthemeform: Cannot inherit from undefined class
xoopsform in /home/www/class/xoopsform/themeform.php
on line 56 

----------------------------------------
Find 'path disclosure error' in '-> formbreak.php' :
-> formbreak.php(2): Fatal error: Class
xoopsformbreak: Cannot inherit from undefined class
xoopsformelement in
/home/www/class/xoopsform/formbreak.php on line
2 

----------------------------------------
Find 'path disclosure error' in '-> formbutton.php' :
-> formbutton.php(2): Fatal error: Class
xoopsformbutton: Cannot inherit from undefined class
xoopsformelement in
/home/www/class/xoopsform/formbutton.php on line
49 

----------------------------------------
Find 'path disclosure error' in '-> formcheckbox.php' :
-> formcheckbox.php(2): Fatal error: Class
xoopsformcheckbox: Cannot inherit from undefined class
xoopsformelement in
/home/www/class/xoopsform/formcheckbox.php on line
47 

----------------------------------------
Find 'path disclosure error' in '-> formdatetime.php' :
-> formdatetime.php(2): Fatal error: Class
xoopsformdatetime: Cannot inherit from undefined class
xoopsformelementtray in
/home/www/class/xoopsform/formdatetime.php on line
50 

----------------------------------------
Find 'path disclosure error' in '-> formdhtmltextarea.php' :
-> formdhtmltextarea.php(2): Warning:
main(XOOPS_ROOT_PATH/class/xoopsform/formtextarea.php):
failed to open stream: No such file or directory in
/home/www/class/xoopsform/formdhtmltextarea.php on
line 43 
-> formdhtmltextarea.php(4): Warning: main(): Failed
opening 'XOOPS_ROOT_PATH/class/xoopsform/formtextarea.php'
for inclusion
(include_path='.:/usr/local/php-4.4.1/lib/php') in
/home/www/class/xoopsform/formdhtmltextarea.php on
line 43 
-> formdhtmltextarea.php(6): Fatal error: Class
xoopsformdhtmltextarea: Cannot inherit from undefined class
xoopsformtextarea in
/home/www/class/xoopsform/formdhtmltextarea.php on
line 56 

----------------------------------------
Find 'path disclosure error' in '-> formelementtray.php' :
-> formelementtray.php(2): Fatal error: Class
xoopsformelementtray: Cannot inherit from undefined class
xoopsformelement in
/home/www/class/xoopsform/formelementtray.php on line
50 

----------------------------------------
Find 'path disclosure error' in '-> formfile.php' :
-> formfile.php(2): Fatal error: Class xoopsformfile:
Cannot inherit from undefined class xoopsformelement in
/home/www/class/xoopsform/formfile.php on line
49 

----------------------------------------
Find 'path disclosure error' in '-> formhidden.php' :
-> formhidden.php(2): Fatal error: Class
xoopsformhidden: Cannot inherit from undefined class
xoopsformelement in
/home/www/class/xoopsform/formhidden.php on line
47 

----------------------------------------
Find 'path disclosure error' in '-> formhiddentoken.php' :
-> formhiddentoken.php(2): Fatal error: Class
xoopsformhiddentoken: Cannot inherit from undefined class
xoopsformhidden in
/home/www/class/xoopsform/formhiddentoken.php on line
41 

----------------------------------------
Find 'path disclosure error' in '-> formlabel.php' :
-> formlabel.php(2): Fatal error: Class
xoopsformlabel: Cannot inherit from undefined class
xoopsformelement in
/home/www/class/xoopsform/formlabel.php on line
47 

----------------------------------------
Find 'path disclosure error' in '-> formpassword.php' :
-> formpassword.php(2): Fatal error: Class
xoopsformpassword: Cannot inherit from undefined class
xoopsformelement in
/home/www/class/xoopsform/formpassword.php on line
49 

----------------------------------------
Find 'path disclosure error' in '-> formradio.php' :
-> formradio.php(2): Fatal error: Class
xoopsformradio: Cannot inherit from undefined class
xoopsformelement in
/home/www/class/xoopsform/formradio.php on line
49 

----------------------------------------
Find 'path disclosure error' in '-> formradioyn.php' :
-> formradioyn.php(2): Warning:
main(XOOPS_ROOT_PATH/class/xoopsform/formradio.php): failed
to open stream: No such file or directory in
/home/www/class/xoopsform/formradioyn.php on line
42 
-> formradioyn.php(4): Warning: main(): Failed
opening 'XOOPS_ROOT_PATH/class/xoopsform/formradio.php' for
inclusion (include_path='.:/usr/local/php-4.4.1/lib/php') in
/home/www/class/xoopsform/formradioyn.php on line
42 
-> formradioyn.php(6): Fatal error: Class
xoopsformradioyn: Cannot inherit from undefined class
xoopsformradio in
/home/www/class/xoopsform/formradioyn.php on line
55 

----------------------------------------
Find 'path disclosure error' in '-> formselect.php' :
-> formselect.php(2): Fatal error: Class
xoopsformselect: Cannot inherit from undefined class
xoopsformelement in
/home/www/class/xoopsform/formselect.php on line
48 

----------------------------------------
Find 'path disclosure error' in '-> formtext.php' :
-> formtext.php(2): Fatal error: Class xoopsformtext:
Cannot inherit from undefined class xoopsformelement in
/home/www/class/xoopsform/formtext.php on line
48 

----------------------------------------
Find 'path disclosure error' in '-> cp_header.php' :
-> cp_header.php(2): Warning: main(): open_basedir
restriction in effect. File(../../../mainfile.php) is not
within the allowed path(s): (/www:/tmp) in
/home/www/include/cp_header.php on line 15 
-> cp_header.php(4): Warning:
main(../../../mainfile.php): failed to open stream:
Operation not permitted in
/home/www/include/cp_header.php on line 15 
-> cp_header.php(6): Fatal error: main(): Failed
opening required '../../../mainfile.php'
(include_path='.:/usr/local/php-4.4.1/lib/php') in
/home/www/include/cp_header.php on line 15 

----------------------------------------
Find 'path disclosure error' in '-> subjecticon.php' :
-> subjecticon.php(2): Fatal error: Class
xoopssubjecticon: Cannot inherit from undefined class
xoopsobject in /home/www/kernel/subjecticon.php on
line 3 

----------------------------------------
Find 'path disclosure error' in '-> timezone.php' :
-> timezone.php(2): Fatal error: Class xoopstimezone:
Cannot inherit from undefined class xoopsobject in
/home/www/kernel/timezone.php on line 3 

----------------------------------------
Find 'path disclosure error' in '-> xoopsmailer.php' :
-> xoopsmailer.php(2): Warning:
main(XOOPS_ROOT_PATH/language/english/mail.php): failed to
open stream: No such file or directory in
/home/www/class/xoopsmailer.php on line 35 
-> xoopsmailer.php(4): Warning: main(): Failed
opening 'XOOPS_ROOT_PATH/language/english/mail.php' for
inclusion (include_path='.:/usr/local/php-4.4.1/lib/php') in
/home/www/class/xoopsmailer.php on line 35 
-> xoopsmailer.php(6): Warning:
main(XOOPS_ROOT_PATH/class/mail/xoopsmultimailer.php):
failed to open stream: No such file or directory in
/home/www/class/xoopsmailer.php on line 42 
-> xoopsmailer.php(8): Warning: main(): Failed
opening 'XOOPS_ROOT_PATH/class/mail/xoopsmultimailer.php'
for inclusion
(include_path='.:/usr/local/php-4.4.1/lib/php') in
/home/www/class/xoopsmailer.php on line 42 

----------------------------------------
Find 'path disclosure error' in '-> mysqldatabase.php' :
-> mysqldatabase.php(2): Warning:
main(XOOPS_ROOT_PATH/class/database/database.php): failed to
open stream: No such file or directory in
/home/www/class/database/mysqldatabase.php on line
42 
-> mysqldatabase.php(4): Warning: main(): Failed
opening 'XOOPS_ROOT_PATH/class/database/database.php' for
inclusion (include_path='.:/usr/local/php-4.4.1/lib/php') in
/home/www/class/database/mysqldatabase.php on line
42 
-> mysqldatabase.php(6): Fatal error: Class
xoopsmysqldatabase: Cannot inherit from undefined class
xoopsdatabase in
/home/www/class/database/mysqldatabase.php on line
55 

----------------------------------------
Find 'path disclosure error' in '-> ThemeListAction.class.php' :
-> ThemeListAction.class.php(2): Warning:
main(XOOPS_MODULE_PATH/legacy/admin/forms/ThemeSelectForm.class.php):
failed to open stream: No such file or directory in
/home/www/modules/legacy/admin/actions/ThemeListAction.class.php
on line 7 
-> ThemeListAction.class.php(4): Fatal error: main():
Failed opening required
'XOOPS_MODULE_PATH/legacy/admin/forms/ThemeSelectForm.class.php'
(include_path='.:/usr/local/php-4.4.1/lib/php') in
/home/www/modules/legacy/admin/actions/ThemeListAction.class.php
on line 7 

----------------------------------------
Find 'path disclosure error' in '->
CustomBlockEditForm.class.php' :
-> CustomBlockEditForm.class.php(2): Warning:
main(XOOPS_ROOT_PATH/core/XCube_ActionForm.class.php):
failed to open stream: No such file or directory in
/home/www/modules/legacy/admin/forms/CustomBlockEditForm.class.php
on line 7 
-> CustomBlockEditForm.class.php(4): Fatal error:
main(): Failed opening required
'XOOPS_ROOT_PATH/core/XCube_ActionForm.class.php'
(include_path='.:/usr/local/php-4.4.1/lib/php') in
/home/www/modules/legacy/admin/forms/CustomBlockEditForm.class.php
on line 7 

----------------------------------------
Find 'path disclosure error' in '-> css.php' :
-> css.php(2): Warning: Smarty error: unable to read
resource: "file:stylesheets/" in
/home/www/class/smarty/Smarty.class.php on line
1095 

----------------------------------------
Find 'path disclosure error' in '-> Legacy_Identity.class.php' :
-> Legacy_Identity.class.php(2): Fatal error: Class
legacy_identity: Cannot inherit from undefined class
xcube_identity in
/home/www/modules/legacy/kernel/Legacy_Identity.class.php
on line 7 

----------------------------------------
Find 'path disclosure error' in '-> charset_mysql.php' :
-> charset_mysql.php(2): Fatal error: Call to a
member function on a non-object in
/home/www/modules/legacy/language/portuguese/charset_mysql.php
on line 2 

----------------------------------------
Find 'path disclosure error' in '-> Mailer.php' :
-> Mailer.php(2): Fatal error: Class legacy_mailer:
Cannot inherit from undefined class phpmailer in
/home/www/modules/legacy/lib/Mailer/Mailer.php on
line 10 

----------------------------------------
Find 'path disclosure error' in '->
class.soap_transport_http.php' :
-> class.soap_transport_http.php(2): Fatal error:
Class soap_transport_http: Cannot inherit from undefined
class nusoap_base in
/home/www/modules/legacy/lib/nusoap/class.soap_transport_http.php
on line 14 

----------------------------------------
Find 'path disclosure error' in '-> class.soap_val.php' :
-> class.soap_val.php(2): Fatal error: Class soapval:
Cannot inherit from undefined class nusoap_base in
/home/www/modules/legacy/lib/nusoap/class.soap_val.php
on line 17 

----------------------------------------
Find 'path disclosure error' in '-> class.soapclient.php' :
-> class.soapclient.php(2): Fatal error: Class
soap_client: Cannot inherit from undefined class nusoap_base
in
/home/www/modules/legacy/lib/nusoap/class.soapclient.php
on line 25 

----------------------------------------
Find 'path disclosure error' in '-> class.wsdl.php' :
-> class.wsdl.php(2): Fatal error: Class wsdl: Cannot
inherit from undefined class nusoap_base in
/home/www/modules/legacy/lib/nusoap/class.wsdl.php on
line 13 

----------------------------------------
Find 'path disclosure error' in '-> class.xmlschema.php' :
-> class.xmlschema.php(2): Fatal error: Class
xmlschema: Cannot inherit from undefined class nusoap_base
in
/home/www/modules/legacy/lib/nusoap/class.xmlschema.php
on line 17 

----------------------------------------
Find 'path disclosure error' in '-> nusoapmime.php' :
-> nusoapmime.php(2): Warning:
main(Mail/mimeDecode.php): failed to open stream: No such
file or directory in
/home/www/modules/legacy/lib/nusoap/nusoapmime.php on
line 36 
-> nusoapmime.php(4): Fatal error: main(): Failed
opening required 'Mail/mimeDecode.php'
(include_path='.:/usr/local/php-4.4.1/lib/php') in
/home/www/modules/legacy/lib/nusoap/nusoapmime.php on
line 36 

----------------------------------------
Find 'path disclosure error' in '-> class.soap_fault.php' :
-> class.soap_fault.php(2): Fatal error: Class
soap_fault: Cannot inherit from undefined class nusoap_base
in
/home/www/modules/legacy/lib/nusoap/class.soap_fault.php
on line 14 

----------------------------------------
Find 'path disclosure error' in '-> class.soap_parser.php' :
-> class.soap_parser.php(2): Fatal error: Class
soap_parser: Cannot inherit from undefined class nusoap_base
in
/home/www/modules/legacy/lib/nusoap/class.soap_parser.php
on line 14 

----------------------------------------
Find 'path disclosure error' in '-> class.soap_server.php' :
-> class.soap_server.php(2): Fatal error: Class
soap_server: Cannot inherit from undefined class nusoap_base
in
/home/www/modules/legacy/lib/nusoap/class.soap_server.php
on line 17 

----------------------------------------
Find 'path disclosure error' in '-> AdminPreload.class.php' :
-> AdminPreload.class.php(2): Fatal error: Class
user_adminpreload: Cannot inherit from undefined class
xcube_actionfilter in
/home/www/modules/user/admin/preload/AdminPreload.class.php
on line 7 

----------------------------------------
Find 'path disclosure error' in '->
AbstractViewAction.class.php' :
-> AbstractViewAction.class.php(2): Fatal error:
Class user_abstractviewaction: Cannot inherit from undefined
class user_action in
/home/www/modules/user/class/AbstractViewAction.class.php
on line 7 

Search complete: 61 files with problems!

2007-03-28 12:25 Updated by: minahito

負責人 Update from (無) to minahito
處理結果 Update from 無 to Accepted

2007-03-28 14:57 Updated by: minahito

處理結果 Update from Accepted to 修正

評語

Logged In: YES
user_id=8353

Thank a lot! I've fixed them.

P.S.
Here is a file I have not fixed.

----------------------------------------
Find 'path disclosure error' in '-> charset_mysql.php' :
-> charset_mysql.php(2): Fatal error: Call
to a
member function on a non-object in
/home/www/modules/legacy/language/portuguese/charset_mys
ql.php
on line 2 
----------------------------------------

Is this yours? :D

2007-03-28 14:58 Updated by: minahito

Ticket Close date is changed to 2007-03-28 14:58
狀態 Update from 開啟 to 關閉

評語

Logged In: YES
user_id=8353

[Remark]
I have not confirmed all of fix. But, I decided to close
this item.

Attachment File List

No attachments

XOOPS

待辦事項 #10152 待辦事項列表 新增待辦事項 RSS

path disclosure (security) 啟用日期: 2007-03-23 07:11 最後更新: 2007-03-28 14:58 監視 ON OFF

細節 回覆

Ticket History (3/5 Histories) Show older Histories

2007-03-23 08:54 Updated by: mikhail

2007-03-26 03:19 Updated by: mikhail

評語 回覆

2007-03-28 12:25 Updated by: minahito

2007-03-28 14:57 Updated by: minahito

評語 回覆

2007-03-28 14:58 Updated by: minahito

評語 回覆

Attachment File List

編輯

待辦事項 #10152
待辦事項列表新增待辦事項 RSS

path disclosure (security)

啟用日期: 2007-03-23 07:11 最後更新: 2007-03-28 14:58

監視

細節

Ticket History (3/5 Histories)

評語

評語

評語