BUGGER
Project Home
Bug Status:
Closed - Resolved
Bug ID242
Date Logged27/11/2012
Logged ByBen Tasker
DetailsPossible LFI Vuln in Plugins subsystem.

It may be possible to manipulate the Plugins README view to include a local file.
DeveloperBTasker
Developer Notes

Bug Comments:

Incredibly difficult to exploit due to existing protections, but will make changes to preclude this
Ben Tasker27-11-2012 12:40
Filesystem navigation operations excluded from the call. Should prevent LFI
Ben Tasker27-11-2012 12:41
At the time of it's abandonment, BUGGERs template was still under development. Apologies for any feelings of nausea! Copyright Ben Tasker 2009 Released under the GNU GPL V3
No permission given for Interception of communications by any third party.
"Broken? Have you BUGGERed it?"