Bine ati venit pe HackTeam Forum !
Aici veti gasi o gama larga de metode de hack atat pe Windows cat si pe platforme Linux/Unix , programe in consecinta ,tutoriale . In acelasi timp aici veti gasi si asistenta help in materie corespunzatoare . Precizam ca tot ce se gaseste pe acest site este doar in scop de dezvoltare iar voi va asumati intreaga raspundere pt actiunile pe care le savarsiti . || SS-TEAM || Va Multumeste pt vizita !
Lista Forumurilor Pe Tematici
Bine ati venit pe HackTeam Forum ! | Reguli | Inregistrare | Login

POZE BINE ATI VENIT PE HACKTEAM FORUM !

Nu sunteti logat.
Nou pe simpatie:
Ioana Deea Profile
Femeie
24 ani
Prahova
cauta Barbat
24 - 49 ani
Bine ati venit pe HackTeam Forum ! / Windows - Hacking ! / phpBB 2.0.13 full path  
Autor
Mesaj Pagini: 1
mexykanu
mexican de-ala nesimtit...

Din: Bucuresti
Inregistrat: acum 19 ani
Postari: 607
/*
--------------------------------------------------------
[N]eo [S]ecurity [T]eam [NST]® - Advisory #09 - 03/03/05
--------------------------------------------------------
Program: phpBB 2.0.13
Homepage:
Vulnerable Versions: phpBB 2.0.13 & Lower versions
Risk: Low Risk!!
Impact: Full path disclosure

-==phpBB 2.0.13 Full path disclosure==-
---------------------------------------------------------

- Description
---------------------------------------------------------
phpBB is a high powered, fully scalable, and highly customizable
Open Source bulletin board package. phpBB has a user-friendly
interface, simple and straightforward administration panel, and
helpful FAQ. Based on the powerful PHP server language and your
choice of MySQL, MS-SQL, PostgreSQL or Access/ODBC database servers,
phpBB is the ideal free community solution for all web sites.

- Tested
---------------------------------------------------------
localhost & many forums

- Explotation
---------------------------------------------------------
phpBB/db/oracle.php

Fatal error: Cannot redeclare sql_nextid() in /home/weblord/phpBB/db/oracle.php on
line 405

I know is stupid!!!
Line 405
function sql_nextid($query_id = 0)
{
if(!$query_id)
{
$query_id = $this->query_result;
}
-==foobar==-

oK if i am not right i think i quick patch it'll be erasing lines 405 to 438
because is repeating the same function twice as the fatal error says "Cannot redeclare
sql_nextid()"
function sql_nextid($query_id = 0) << Is repeated twice.

- Exploit
---------------------------------------------------------
Not necesesary!!

- Solutions
--------------------------------------------------------
Not Yet xD

- References
-------------------------------------------------------- 


- Credits
-------------------------------------------------
Discovered by HaCkZaTaN


_______________________________________



Da click aici pentru a vedea puterea LAMERILOR

pus acum 18 ani
   
Sad-Dreamer
Vizitator



merge si cu chestia aia cu cookie ...la mine a mers si iei direct admin nu te mai complici :P

Modificat de Sad-Dreamer (acum 18 ani)


pus acum 18 ani
   
Pagini: 1  

Mergi la