wordpress plugins wp-Table v1.52 Remote File Inclusion Vulnerability

--0016e6d7eee5d4a66e046fef8109
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

Hi Dear,
I found a new bug. please publish it.
thank you
best regards

--0016e6d7eee5d4a66e046fef8109
Content-Type: text/plain; charset=US-ASCII; name="wp-Table v1.52.txt"
Content-Disposition: attachment; filename="wp-Table v1.52.txt"
Content-Transfer-Encoding: base64
X-Attachment-Id: f_cz7wvfdv0
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--0016e6d7eee5d4a66e046fef8109--


Replies to this exploit:

From: Francesco Laurita francesco@francesco-laurita.info
Sent: Thu 30. Jul 2009 21:39
On Thu, 2009-07-30 at 21:49 +0430, Cru3l.b0y wrote:
> Hi Dear,
> I found a new bug. please publish it.
> thank you
> best regards

Bogus.
ABSPATH is a defined variable. You cant change its value by using a
query string.

Regards



From: Francesco Laurita francesco@francesco-laurita.info
Sent: Thu 30. Jul 2009 21:39
On Thu, 2009-07-30 at 21:49 +0430, Cru3l.b0y wrote:
> Hi Dear,
> I found a new bug. please publish it.
> thank you
> best regards

Bogus.
ABSPATH is a defined variable. You cant change its value by using a
query string.

Regards



From: Francesco Laurita francesco@francesco-laurita.info
Sent: Thu 30. Jul 2009 21:39
On Thu, 2009-07-30 at 21:49 +0430, Cru3l.b0y wrote:
> Hi Dear,
> I found a new bug. please publish it.
> thank you
> best regards

Bogus.
ABSPATH is a defined variable. You cant change its value by using a
query string.

Regards



From: Francesco Laurita francesco@francesco-laurita.info
Sent: Thu 30. Jul 2009 21:39
On Thu, 2009-07-30 at 21:49 +0430, Cru3l.b0y wrote:
> Hi Dear,
> I found a new bug. please publish it.
> thank you
> best regards

Bogus.
ABSPATH is a defined variable. You cant change its value by using a
query string.

Regards



From: Francesco Laurita francesco@francesco-laurita.info
Sent: Thu 30. Jul 2009 21:39
On Thu, 2009-07-30 at 21:49 +0430, Cru3l.b0y wrote:
> Hi Dear,
> I found a new bug. please publish it.
> thank you
> best regards

Bogus.
ABSPATH is a defined variable. You cant change its value by using a
query string.

Regards



From: Francesco Laurita francesco@francesco-laurita.info
Sent: Thu 30. Jul 2009 21:39
On Thu, 2009-07-30 at 21:49 +0430, Cru3l.b0y wrote:
> Hi Dear,
> I found a new bug. please publish it.
> thank you
> best regards

Bogus.
ABSPATH is a defined variable. You cant change its value by using a
query string.

Regards



From: Francesco Laurita francesco@francesco-laurita.info
Sent: Thu 30. Jul 2009 21:39
On Thu, 2009-07-30 at 21:49 +0430, Cru3l.b0y wrote:
> Hi Dear,
> I found a new bug. please publish it.
> thank you
> best regards

Bogus.
ABSPATH is a defined variable. You cant change its value by using a
query string.

Regards



From: Francesco Laurita francesco@francesco-laurita.info
Sent: Thu 30. Jul 2009 21:39
On Thu, 2009-07-30 at 21:49 +0430, Cru3l.b0y wrote:
> Hi Dear,
> I found a new bug. please publish it.
> thank you
> best regards

Bogus.
ABSPATH is a defined variable. You cant change its value by using a
query string.

Regards



From: Francesco Laurita francesco@francesco-laurita.info
Sent: Thu 30. Jul 2009 21:39
On Thu, 2009-07-30 at 21:49 +0430, Cru3l.b0y wrote:
> Hi Dear,
> I found a new bug. please publish it.
> thank you
> best regards

Bogus.
ABSPATH is a defined variable. You cant change its value by using a
query string.

Regards



From: Francesco Laurita francesco@francesco-laurita.info
Sent: Thu 30. Jul 2009 21:39
On Thu, 2009-07-30 at 21:49 +0430, Cru3l.b0y wrote:
> Hi Dear,
> I found a new bug. please publish it.
> thank you
> best regards

Bogus.
ABSPATH is a defined variable. You cant change its value by using a
query string.

Regards



From: Francesco Laurita francesco@francesco-laurita.info
Sent: Thu 30. Jul 2009 21:39
On Thu, 2009-07-30 at 21:49 +0430, Cru3l.b0y wrote:
> Hi Dear,
> I found a new bug. please publish it.
> thank you
> best regards

Bogus.
ABSPATH is a defined variable. You cant change its value by using a
query string.

Regards



From: Francesco Laurita francesco@francesco-laurita.info
Sent: Thu 30. Jul 2009 21:39
On Thu, 2009-07-30 at 21:49 +0430, Cru3l.b0y wrote:
> Hi Dear,
> I found a new bug. please publish it.
> thank you
> best regards

Bogus.
ABSPATH is a defined variable. You cant change its value by using a
query string.

Regards



From: Francesco Laurita francesco@francesco-laurita.info
Sent: Thu 30. Jul 2009 21:39
On Thu, 2009-07-30 at 21:49 +0430, Cru3l.b0y wrote:
> Hi Dear,
> I found a new bug. please publish it.
> thank you
> best regards

Bogus.
ABSPATH is a defined variable. You cant change its value by using a
query string.

Regards



From: Francesco Laurita francesco@francesco-laurita.info
Sent: Thu 30. Jul 2009 21:39
On Thu, 2009-07-30 at 21:49 +0430, Cru3l.b0y wrote:
> Hi Dear,
> I found a new bug. please publish it.
> thank you
> best regards

Bogus.
ABSPATH is a defined variable. You cant change its value by using a
query string.

Regards



From: Francesco Laurita francesco@francesco-laurita.info
Sent: Thu 30. Jul 2009 21:39
On Thu, 2009-07-30 at 21:49 +0430, Cru3l.b0y wrote:
> Hi Dear,
> I found a new bug. please publish it.
> thank you
> best regards

Bogus.
ABSPATH is a defined variable. You cant change its value by using a
query string.

Regards



From: Francesco Laurita francesco@francesco-laurita.info
Sent: Thu 30. Jul 2009 21:39
On Thu, 2009-07-30 at 21:49 +0430, Cru3l.b0y wrote:
> Hi Dear,
> I found a new bug. please publish it.
> thank you
> best regards

Bogus.
ABSPATH is a defined variable. You cant change its value by using a
query string.

Regards