Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

Jetbox CMS version 2.1 Multiple SQL Injection Vulnerabilities

Simple Accessible XHTML Online News v4.6 Remote File Include Exploit

SimpGB v1.46.0 Remote File Include Exploit

From:	tchouamou_(at)_gmail.com <tchouamou_(at)_gmail.com>
Date:	22.05.2007
Subject:	Remedy for: Remot File Include In phpexplorator_2_0

Best Remedy:
Configure a web server authentification for using file phpexplorator.php.
Good Remedy:
  Use phpexplorator.class.php and personalise it like your want see (http://sourceforge.net/forum/forum.php?thread_id=1664845&forum_id=637317
)

Another remedy:
Permute line 4902 with line 4903 like this:
/*4902*/         $this->language = $this->load_lang($this->config);
/*4903*/         if ($this->login()) {
//               


to


/*4902*/         if ($this->login()) {
/*4903*/         $this->language = $this->load_lang($this->config);

Next Remedy:
Download update from (http://sourceforge.net/project/showfiles.php?group_id=183073)



Thanks



By Tchouamou Eric Herve (http://sourceforge.net/users/tchouamoueric/)
Author of: PhpExplorator
From: Cameroon