 |
|
 |
 |
Menu |
 |
|
 Home |
| |
|
 Discussions |
| |
|
 Tools |
| |
|
| Affiliates |
| |
|
 Content |
| |
|
 Info |
| | |
|
|
|
|
|
User Info |
|
 Membership:
 Latest: MichaelSnaRe
 New Today: 0
 New Yesterday: 0
 Overall: 9144
 People Online:
 Visitors: 83
 Members: 0
 Total: 83
|
|
|
|
|
|
Full disclosure |
|
|
|
 |
|
 |
 |
|
 |
IT Security and Insecurity Portal |
|
|
New advisories are out - MyBB 1.2.10 |
|
 Posted: Wed Jan 16, 2008 8:38 pm |
 |
|
| waraxe |
| Site admin |
 |
|
| Joined: May 11, 2004 |
| Posts: 2407 |
| Location: Estonia, Tartu |
|
|
 |
|
 |
|
|
|
|
|
| Posted: Thu Jan 17, 2008 6:55 am |
|
|
| pexli |
| Valuable expert |
 |
|
| Joined: May 24, 2007 |
| Posts: 665 |
| Location: Bulgaria |
|
|
|
|
|
|
Really nice work waraxe.  |
|
|
|
|
| Posted: Thu Jan 17, 2008 12:08 pm |
|
|
| waraxe |
| Site admin |
|
|
| Joined: May 11, 2004 |
| Posts: 2407 |
| Location: Estonia, Tartu |
|
|
|
|
|
|
| koko wrote: | | Really nice work waraxe. |
Thanks. By the way, i did some tests yesterday and found out, that ~20% mybb installations are still unpatched and waiting for shell commands  |
|
|
|
|
| Posted: Thu Jan 17, 2008 12:50 pm |
|
|
| pexli |
| Valuable expert |
|
|
| Joined: May 24, 2007 |
| Posts: 665 |
| Location: Bulgaria |
|
|
|
|
|
|
| Наверно если бо тестил прежде чем запустить релиз % бъл бо гдето 80.Твой експлойт зай,ет свое место в моей колекции потомучто всегда может пригодится. |
|
|
|
|
| Posted: Thu Jan 17, 2008 1:57 pm |
|
|
| waraxe |
| Site admin |
|
|
| Joined: May 11, 2004 |
| Posts: 2407 |
| Location: Estonia, Tartu |
|
|
|
|
|
|
| I tested it short time after discovery and success rate was === 100%. really. There was absolutely no mitigating factors - register_globals, magic_quotes_gpc - it all does not matter, remote php code execution was working on any mybb-powered website. |
|
|
|
|
| Posted: Thu Jan 17, 2008 9:50 pm |
|
|
| pexli |
| Valuable expert |
|
|
| Joined: May 24, 2007 |
| Posts: 665 |
| Location: Bulgaria |
|
|
|
|
|
|
| This is great.What is the feeling to have private exploits waraxe? |
|
|
|
|
| Posted: Thu Jan 17, 2008 10:36 pm |
|
|
| waraxe |
| Site admin |
|
|
| Joined: May 11, 2004 |
| Posts: 2407 |
| Location: Estonia, Tartu |
|
|
|
|
|
|
Private exploit can be useful ...  |
|
|
|
|
www.waraxe.us Forum Index -> All other software
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|
