HM2K

After browsing the cex.co.uk website for some time I came across a few errors on the site…

The first one was when I visited this page a few months back…

PHP Warning:  imagejpeg() [<a href=’function.imagejpeg’>function.imagejpeg</a>]: Unable to open ‘c:\Inetpub\wwwroot\images\products\gaming\\5017783016963.jpg’ for writing: No such file or directory in D:\websites\ukwwwroot\includes\functions\functions.inc.php on line 580

I also came across a couple of other errors reported by other users on their very own forum…

PHP Warning: include(include/templates/side_r_uncached.php) [function.include]: failed to open stream: No such file or directory in D:\websites\ukwwwroot\sell\order_monitor_complete.php on line 188
PHP Warning: include() [function.include]: Failed opening ‘include/templates/side_r_uncached.php’ for inclusion (include_path=’C:\PHP\pear;d:\websites\ukwwwroot’) in D:\websites\ukwwwroot\sell\order_monitor_complete.php on line 188

PHP Warning: include(include/templates/side_r_uncached.php) [function.include]: failed to open stream: No such file or directory in D:\websites\ukwwwroot\sell\order_monitor_complete.php on line 188
PHP Warning: include() [function.include]: Failed opening ‘include/templates/side_r_uncached.php’ for inclusion (include_path=’C:\php528nts\pear;d:\websites\ukwwwroot’) in D:\websites\ukwwwroot\sell\order_monitor_complete.php on line 188

I’m not sure whether these errors really give too much away, but they are still a security risk by releasing information that you don’t want us to know.

Such as that you’re using Windows to serve your site and the paths you’re including from.

Security Experts: I’m not seeing any obvious vulnerabilities, are you?

Cex: I’m available for consultancy and can fix these errors for you.

Let’s see who gets there first…

Times are hard hey?