bugtraq - Destiney Links Script v2.1.2

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: 21 May 2006 05:48:12 -0000
From: luny@...fucktard.com
To: bugtraq@...urityfocus.com
Subject: Destiney Links Script v2.1.2

Destiney Links Script v2.1.2 - XSS Vulnv & Full path errors.

Homepage:

http://destiney.com/scripts

Description:
Destiney Links is an Open Source project written in PHP for use with the MySQL Server entity.  Links provides a pre-built, dynamically generated, Link site.  Links counts referrers in and out for listed sites.  Links provides site categorization up to 5 levels dee

Effected Files:
index.php

Exploits:

Almost all files called directly from the /include/ folder and /themes/original/ displays full path disclosure errors.

Input data in the Search and Add a Site forms arent filtered and sanatized. Attacks such as XSS' can occure because of that.

URL injection of index.php can lead to full path disclosure errors.

URL Example:
http://links.destiney.com/index.php?show=pop'

Warning: include(include/pop\'.php) [function.include]: failed to open stream: No such file or directory in /home/destiney/domains/examplesite.com/public_html/index.php on line 98

Warning: include() [function.include]: Failed opening 'include/pop\'.php' for inclusion (include_path='.:/usr/share/php5:/usr/share/php') in /home/destiney/domains/examplesite.com/public_html/index.php on line 98