Teekai's Forum Weak Visitor IP Address Encryption Vulnerability

The following PHP script was provided to decrypt to visitor IP addresses:

<? $$cryptedip = explode(' ', $cryptedip); $$key = md5("20"); $$trueip = $$cryptedip[0]/$key.".".$cryptedip[1]/$key.".".$cryptedip[2]/$key.".".$cryptedip[3]/$key; echo "Result: $$trueip "; >


 

Privacy Statement
Copyright 2010, SecurityFocus