Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Vuln-Dev
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

Re: [Full-disclosure] ashnews Cross-Site Scripting Vulnerability

from [Dan B UK] Network Security [Permanent Link]
Subject: Re: [Full-disclosure] ashnews Cross-Site Scripting Vulnerability
Date: Tue, 31 Jan 2006 00:50:05 +0000 
Hi zeus,

Did you even look at the source code for this script. If you had then you would see that in the case of register_global's being turned on there is a bigger issue to worry about; Remote/Local File Inclusion - Server side.

I have just managed to examine the source code on a few servers in under 10 minutes; from start to finish.

(I know that cookie stealing is an issue; and evil JavaScript can do a lot. But if you can alter the server files then there is an even greater issue!)

Due to the nature of the issue I am not disclosing the detail of it until the writer of the software has updated it; maybe you could have waited??

A vulnerability that allows privileges of the apache user within the limitations of how much PHP has been locked down.

Cheers,
Dan.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

[More with this subject...]




<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  New worm crawling trough blogs?!, blog . worm
Next by Date:  [ MDKSA-2006:027 ] - Updated gzip packages fix zgrep vulnerabilities, security
Previous by Thread:  [Full-disclosure] ashnews Cross-Site Scripting Vulnerability, zeus olimpusklan
Next by Thread:  Re: [Full-disclosure] ashnews Cross-Site Scripting Vulnerability, George A. Theall
Indexes:  [Date] [Thread] [Top] [All Lists]