ezContents CMS many local documents contain the loophole(3)

Add date: 10/08/2008 Publishing date: 10/08/2008 Hits: 2

Total 6 pages, Current page:3, Jump to page:

(substr($linkref,0,7) == 'telnet:') || (substr($linkref,0,5) == 'wais: ')) {
return True;
} else {
return False;
}
} else {
return False;
}
} // moduleExternalLink

if (! (isset ($GLOBALS [“rootdp”]))) {
ECHO 'Remote Code Execution Patch Installed on this implementation of \
ezContents'; DIE;
}
if ((moduleExternalLink ($GLOBALS [“rootdp”])) || \
(moduleExternalLink ($GLOBALS [“modfiledir”])) ||
(moduleExternalLink ($GLOBALS [“modules_home”])) || \
(moduleExternalLink ($GLOBALS [“admin_home”])) || \
(moduleExternalLink ($GLOBALS [“language_home”])) ) {
ECHO 'Remote Code Execution Patch Installed on this implementation of \
ezContents'; DIE;
}

#################################################

3. /modules/diary/showdiarydetail.php, /modules/gallery/showgallerydetails.php, /modules/reviews/showreviewsdetails.php and in the /modules/news/shownewsdetails.php script's local document contains

The success attack request has opened register_globals.

showdiarydetail.php document 32-46 lines
--------------------------------------
#################################################

global $HTTP_SERVER_VARS;
if ((substr ($HTTP_SERVER_VARS [“PHP_SELF”], - 11) == 'control.php') ||
(substr ($HTTP_SERVER_VARS [“PHP_SELF”], - 10) == 'module.php') ||
(substr ($HTTP_SERVER_VARS [“PHP_SELF”], - 16) == 'showcontents.php')) {
require_once ('. /modules/moduleSec.php');
} else {
require_once ('. /moduleSec.php');
}

$GLOBALS [“ModuleName”] = 'diary';

include_once ($GLOBALS [“admin_home”]. “compile.php”);

include_once ($GLOBALS [“language_home”]. $GLOBALS [“gsLanguage”].”/lang_admin.php ");
include_once ($GLOBALS [“language_home”]. $GLOBALS [“gsLanguage”].”/lang_main.php ");

#################################################

4. /modules/diary/submit_diary.php, /modules/gallery/submit_gallery.php, /modules/guestbook/submit_guestbook.php, /modules/reviews/submit_reviews.php and in the /modules/news/submit_news.php script's local document contains

The success attack request has opened register_globals.

Other pages: : <<Prev * 1 * 2 * 3 * 4 * 5 * 6 * Next>>

Prev:Novell iPrint client side ActiveX controls a security loophole

Next:the xine-lib 1.1.15 editions repair many security cracks

Comment:

Category: Home > System crack