ezContents CMS many local documents contain the loophole(4)

Add date: 10/08/2008 Publishing date: 10/08/2008 Hits: 2

Total 6 pages, Current page:4, Jump to page:

submit_diary.php document 32-51 lines
-----------------------------------
#################################################

global $HTTP_SERVER_VARS;
if ((substr ($HTTP_SERVER_VARS [“PHP_SELF”], - 11) == 'control.php') ||
(substr ($HTTP_SERVER_VARS [“PHP_SELF”], - 10) == 'module.php') ||
(substr ($HTTP_SERVER_VARS [“PHP_SELF”], - 16) == 'showcontents.php')) {
require_once ('. /modules/moduleSec.php');
} else {
require_once ('. /moduleSec.php');
}

// Localisation variables (used for default values)
// Change these to suit your site preferences
//
$expiryperiod = 'm'; // Time period to calculate the banner expiry \
date (based on today's date) $expirynumber = 1;

$GLOBALS [“ModuleName”] = 'diary';

include_once ($GLOBALS [“language_home”]. $GLOBALS [“gsLanguage”].”/lang_admin.php ");
include_once ($GLOBALS [“language_home”]. $GLOBALS [“gsLanguage”].”/lang_main.php ");

#################################################

5. /modules/news/archivednews_summary.php, in the /modules/news/news_summary.php document's local document contains

The success attack request has opened register_globals.

news_summary.php document 32-41 lines
-----------------------------------
#################################################

global $HTTP_SERVER_VARS;
if ((substr ($HTTP_SERVER_VARS [“PHP_SELF”], - 11) == 'control.php') ||
(substr ($HTTP_SERVER_VARS [“PHP_SELF”], - 10) == 'module.php') ||
(substr ($HTTP_SERVER_VARS [“PHP_SELF”], - 16) == 'showcontents.php')) {
require_once ('. /modules/moduleSec.php');
} else {
require_once ('. /moduleSec.php');
}

include_once ($GLOBALS [“admin_home”]. “compile.php”);

#################################################

6. /modules/diary/inlineeventlist.php, in the /modules/news/inlinenews.php document's local document contains

The success attack request has opened register_globals.

inlinenews.php document 32-52 lines
---------------------------------
#################################################

global $HTTP_SERVER_VARS;
if ((substr ($HTTP_SERVER_VARS [“PHP_SELF”], - 11) == 'control.php') ||
(substr ($HTTP_SERVER_VARS [“PHP_SELF”], - 10) == 'module.php') ||
(substr ($HTTP_SERVER_VARS [“PHP_SELF”], - 16) == 'showcontents.php')) {
require_once ('. /modules/moduleSec.php');
} else {
require_once ('. /moduleSec.php');
}

Other pages: : <<Prev * 1 * 2 * 3 * 4 * 5 * 6 * Next>>

Prev:Novell iPrint client side ActiveX controls a security loophole

Next:the xine-lib 1.1.15 editions repair many security cracks

Comment:

Category: Home > System crack