i tried to inject php code to roundcube errors log file, with no success. i think there is something filtering injected php code.

closed as not a real question by rook, Scott Pack, Iszi, schroeder, Rory Alsop Sep 17 '12 at 14:58

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center. If this question can be reworded to fit the rules in the help center, please edit the question.

  • 1
    This question will need a lot more detail to be answerable. What was your lab setup (OS & Software versions, network layout, etc.)? Which vulnerability (CVE or other external reference ID would be good) were you trying to exploit? – Iszi Sep 17 '12 at 12:43
  • 1
    in addition to @Iszi, what is roundcube? – schroeder Sep 17 '12 at 14:33

The short answer is: no. Stored code injection and LFI vulnerabilities are 2 different kinds of vulnerabilities.

Not the answer you're looking for? Browse other questions tagged or ask your own question.