search

kurobeats / fimap

fimap is a little python tool which can find, prepare, audit, exploit and even google automatically for local and remote file inclusion bugs in webapps.
GNU General Public License v2.0
521 stars 99 forks source link

bug found #16

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 
[BEFOR REPORTING CHECK OUT THE SVN VERSION AND TEST IF IT'S ALREADY FIXED -
THANKS - REMOVE THIS LINE]

On which URL this error occures? (Important!)

Which version of fimap you are using? (You can see that in the very first
line)

On what operating system?

Please provide any additional information below.

fimap version: fimap_alpha_v06

operating system: ubuntu 9.10 amd64

command: ./fimap.py -g -q 'inurl:show.php' -p 20

Bug:

cut here %<--------------------------------------------------------------
Traceback (most recent call last):
  File "./fimap.py", line 258, in <module>
    g.startGoogleScan()
  File
"/home/serial/downloads/HPC/_NEW/news/fimap_alpha_v06/googleScan.py", line
76, in startGoogleScan
    single.scan()
  File
"/home/serial/downloads/HPC/_NEW/news/fimap_alpha_v06/singleScan.py", line
51, in scan
    res = t.testTargetVuln()
  File
"/home/serial/downloads/HPC/_NEW/news/fimap_alpha_v06/targetScanner.py",
line 80, in testTargetVuln
    rep = self.identifyVuln(self.Target_URL, self.params, k)
  File
"/home/serial/downloads/HPC/_NEW/news/fimap_alpha_v06/targetScanner.py",
line 157, in identifyVuln
    pre = os.path.join(r.getServerPath(), pre)
  File "/usr/lib/python2.6/posixpath.py", line 67, in join
    elif path == '' or path.endswith('/'):
AttributeError: 'NoneType' object has no attribute 'endswith'

Original issue reported on code.google.com by serial...@gmail.com on 20 Nov 2009 at 11:16

GoogleCodeExporter commented 9 years ago 
Hi,

I am going to check this bug later today.

Thanks for reporting!
imax.

Original comment by fimap....@gmail.com on 21 Nov 2009 at 3:21

GoogleCodeExporter commented 9 years ago 
Hi.

Do you have tried it with the version 06.1?
I believe it's fixed there already.

Thanks,
imax.

Original comment by fimap....@gmail.com on 23 Nov 2009 at 4:25

GoogleCodeExporter commented 9 years ago 
Closed due no response from opener.

Original comment by fimap....@gmail.com on 4 Dec 2009 at 4:50