 |
|
 |
 |
Menu |
 |
|
 Home |
| |
|
 Discussions |
| |
|
 Tools |
| |
|
| Affiliates |
| |
|
 Content |
| |
|
 Info |
| | |
|
|
|
|
|
User Info |
|
 Membership:
 Latest: MichaelSnaRe
 New Today: 0
 New Yesterday: 0
 Overall: 9144
 People Online:
 Visitors: 128
 Members: 0
 Total: 128
|
|
|
|
|
|
Full disclosure |
|
|
|
 |
|
 |
 |
|
 |
IT Security and Insecurity Portal |
|
|
[waraxe-2004-SA#035] - security holes in search module |
|
 Posted: Sat Jul 17, 2004 6:20 pm |
 |
|
| waraxe |
| Site admin |
 |
|
| Joined: May 11, 2004 |
| Posts: 2407 |
| Location: Estonia, Tartu |
|
|
 |
|
 |
|
Ok, let's begin with patching.
Open file "/modules/Search/index.php"
and find this code at beginning of the file:
| Code: |
require_once("mainfile.php");
$module_name = basename(dirname(__FILE__));
get_lang($module_name);
|
Now let's add some sanitizing code:
| Code: |
require_once("mainfile.php");
$instory = '';
$query = htmlentities(stripslashes($query));
if(isset($sid)) $sid = intval($sid);
$module_name = basename(dirname(__FILE__));
get_lang($module_name);
|
That's all for now. Stay tuned for new advisories and fixes!
See ya!  |
|
Last edited by waraxe on Sat Apr 16, 2005 2:49 pm; edited 1 time in total |
|
|
|
| Posted: Sat Jul 17, 2004 6:26 pm |
|
|
| genoxide |
| Regular user |
 |
|
| Joined: Jun 14, 2004 |
| Posts: 15 |
|
|
|
|
|
|
|
|
|
|
|
| Posted: Sat Jul 17, 2004 7:18 pm |
|
|
| waraxe |
| Site admin |
|
|
| Joined: May 11, 2004 |
| Posts: 2407 |
| Location: Estonia, Tartu |
|
|
|
|
|
|
Your method of fixing is ok.
About 6.x versions - have not tested yet.
By the way - new advisory is coming very soon, maybe even today...
 |
|
|
|
|
www.waraxe.us Forum Index -> How to fix
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|
