Jump to content

Recommended Posts

Hi guys,

 

I have made some modifications to my picture hosting site.

 

Please will you guys test it and advise things that you (dis)like, and also any more ideas or things you think i should consider changing/adding.

 

http://www.forumpix.co.uk

 

Many thanks

 

Full Path Disclosure:

There is Full Path Disclosure if you upload an invalid image.

Warning: imagecreatefromjpeg() [function.imagecreatefromjpeg]: gd-jpeg: JPEG library reports unrecoverable error: in C:\Public\www\Matt\www.forumpix.co.uk\index.php on line 86

 

Warning: imagecreatefromjpeg() [function.imagecreatefromjpeg]: 'C:\WINDOWS\TEMP\php60.tmp' is not a valid JPEG file in C:\Public\www\Matt\www.forumpix.co.uk\index.php on line 86

 

Warning: Cannot modify header information - headers already sent by (output started at C:\Public\www\Matt\www.forumpix.co.uk\index.php:86) in C:\Public\www\Matt\www.forumpix.co.uk\index.php on line 212

 

Warning: Cannot modify header information - headers already sent by (output started at C:\Public\www\Matt\www.forumpix.co.uk\index.php:86) in C:\Public\www\Matt\www.forumpix.co.uk\index.php on line 213

 

Warning: Cannot modify header information - headers already sent by (output started at C:\Public\www\Matt\www.forumpix.co.uk\index.php:86) in C:\Public\www\Matt\www.forumpix.co.uk\index.php on line 214

  • 6 months later...

Vulnerability description

By this form input is possible to upload a file to the server.

 

The impact of this vulnerability

User may upload malicious files to server

 

How to fix this vulnerability

Check if the script inputs are properly validated.

 

 

Vulnerability description

One or more email addresses have been found on this page. The majority of spam comes from email addresses harvested off the internet. The spam-bots (also known as email harvesters and email extractors) are programs that scour the internet looking for email addresses on any website they come across. Spambot programs look for strings like myname@mydomain.com and then record any addresses found.

This vulnerability affects /.

The impact of this vulnerability

Email addresses posted on Web sites may attract spam.

 

Attack details

We found

contact@forumpix.co.uk

 

 

 

 

 

×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.