Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:




bugtraq logo Bugtraq mailing list archives

PHP-Nuke 7.4 Multiple XSS Vulnerabilities Patch
From: Pierquinto Manco <mantra () ntj it>
Date: 5 Sep 2004 11:00:06 -0000



***************************************************************
                         CODEBUG LABS
PATCH #1 to [XSS] Vulnerabilities in Admin Panel of PHP-NUKE 7.4
***************************************************************
To Patch your admin panel from this vulnerabilities hurricane you have to
apply this code to your admin.php file:
if ( !empty($HTTP_GET_VARS['admin']) ) {
        die("Shit! Mantra wins =)");
}

if ( !empty($HTTP_POST_VARS['admin']) ) {
        die("Shit! Mantra wins =)");
}

-) Note
Previous patch(CODEBUG #1,#2,#3) isn't enough performant.
Try this one.
There are a lot of this problem in PHP-Nuke 7.4, my patch will check
the content of $_POST[admin] and $_GET[admin].
I'm going to post all this vulnerabilities on my site...
http://www.mantralab.org

**************************************************************
                http://www.mantralab.org
**************************************************************


  By Date           By Thread  

Current thread:
  • PHP-Nuke 7.4 Multiple XSS Vulnerabilities Patch Pierquinto Manco (Sep 07)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]