bugtraq - Re: Startpage <= 1.0 (cfgLanguage) Remote File Inclusion Vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-Id: <20060813123144.7637@mail.gmx.de>
Date: Sun, 13 Aug 2006 14:31:44 +0200
From: "Carsten Eilers" <ceilers-lists@....de>
To: <sh3ll@...ll.ir>, <bugtraq@...urityfocus.com>
Subject: Re: Startpage <= 1.0 (cfgLanguage) Remote File Inclusion
 Vulnerability

sh3ll@...ll.ir schrieb am Thu, 10 Aug 2006 20:53:46 +0000:

>Sanitize Variabel $cfgLanguage in edit.php , functions.php , new.php ,
>PageBottom.php 
>
>& PageTop.php

Take a look at config.php:

$cfgLanguage	= 'uk';						// Which language do you prefer :
								//	uk = English
								//	nl = Dutch
								//	de = German


config.php is included in edit.php, new.php, PageBottom.php 
and PageTop.php at the top of the file, in functions.php at
the top of relevant functions.

No way to include something with cfgLanguage.

Regards
 Carste

-- 
Dipl.-Inform. Carsten Eilers
IT-Sicherheit und Datenschutz

<http://www.ceilers-it.de>