Destiney Links Script v2.1.2

Risk: Low
Local: No
Remote: Yes

Destiney Links Script v2.1.2 - XSS Vulnv & Full path errors. Homepage: Description: Destiney Links is an Open Source project written in PHP for use with the MySQL Server entity. Links provides a pre-built, dynamically generated, Link site. Links counts referrers in and out for listed sites. Links provides site categorization up to 5 levels dee Effected Files: index.php Exploits: Almost all files called directly from the /include/ folder and /themes/original/ displays full path disclosure errors. Input data in the Search and Add a Site forms arent filtered and sanatized. Attacks such as XSS' can occure because of that. URL injection of index.php can lead to full path disclosure errors. URL Example:' Warning: include(include/pop'.php) [function.include]: failed to open stream: No such file or directory in /home/destiney/domains/ on line 98 Warning: include() [function.include]: Failed opening 'include/pop'.php' for inclusion (include_path='.:/usr/share/php5:/usr/share/php') in /home/destiney/domains/ on line 98

Vote for this issue:


Thanks for you vote!


Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2024,


Back to Top