Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 1 down vote favorite

i tried to inject php code to roundcube errors log file, with no success. i think there is something filtering injected php code.

share|improve this question
1  
This question will need a lot more detail to be answerable. What was your lab setup (OS & Software versions, network layout, etc.)? Which vulnerability (CVE or other external reference ID would be good) were you trying to exploit? – Iszi Sep 17 '12 at 12:43
1  
in addition to @Iszi, what is roundcube? – schroeder Sep 17 '12 at 14:33

closed as not a real question by Rook, Scott Pack, Iszi, schroeder, Rory Alsop♦ Sep 17 '12 at 14:58

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, see the FAQ.

1 Answer

up vote 0 down vote

The short answer is: no. Stored code injection and LFI vulnerabilities are 2 different kinds of vulnerabilities.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.