flatpress icon indicating copy to clipboard operation
flatpress copied to clipboard

Published 20 hours ago • verified publisher icon flatpressblog

Admin: Potential path disclosure by invalid parameters

Open azett opened this issue 5 years ago • 1 comments

trigger_error() causes potential path disclosure, depending on the server's error level.

Demo: https://www.site.tld/admin.php?p=DOESNOTEXIST&action=write&page=about

Effect:

Fatal error: Requested panel does not exists! in .../flatpress/admin/main.php on line 39

azett avatar Jan 03 '20 20:01 azett