Old Patches :: 058-015 - Admin Hacks List SQL Injection

The time now is Sun 19 May, 2013 10:15 • All times are UTC + 1 Hour [DST enabled]

058-015 - Admin Hacks List SQL Injection

Page 1 of 1

Mighty Gorgon Luca Libralato Joined: August 2006 Posts: 6814 Location: Borgo San Michele	058-015 - Admin Hacks List SQL Injection Hi All, the admin hacks list could have a potential issue: http://milw0rm.com/exploits/2851 I didn't try the exploit, but after looking at the code, I would fix it in this way: OPEN adm/admin_hacks_list.php FIND Code: [Download] [Hide] [Select] Code: [Download] [Show] if (count($_POST)) BEFORE ADD Code: [Download] [Hide] [Select] Code: [Download] [Show] $hack_id = intval($hack_id); You should apply this patch as soon as possible. ____________ Luca SEARCH is the quickest way to get support. Icy Phoenix ColorizeIt - CustomIcy - HON
#1 Tue 28 Nov, 2006 23:19

Thanks for the useful Topic Mighty Gorgon: m740 (29 November), nickjack (29 November), Zuker (29 November), buldo (29 November), ThE KuKa (29 November), brandsrus (29 November), TheSteffen (01 December)

Sponsors	Icy Phoenix is an open source project, you can show your appreciation and support future development by donating to the project.

Zuker Joined: August 2006 Posts: 2134 Location: BA	Re: 058-015 - Admin Hacks List SQL Injection Thanks MG, patched on my site ____________ ? Zuker - EDDB - LPM - Sharefields
#2 Tue 28 Nov, 2006 23:59

moreteavicar Joined: August 2006 Posts: 608 Location: Classified	Re: 058-015 - Admin Hacks List SQL Injection Thanks MG
#3 Wed 29 Nov, 2006 15:50

Skorpion Joined: October 2006 Posts: 11 Location: Lanciano	Re: 058-015 - Admin Hacks List SQL Injection done ____________ Daniele Caporrella www.pionierilanciano.org/forum
#4 Wed 29 Nov, 2006 16:39

fab120 Joined: August 2006 Posts: 41 Location:	Re: 058-015 - Admin Hacks List SQL Injection I Have tested the bug but it don't work on XS. however thanks you for the patch! ____________ My english isn't perfect! http://fab120.netsons.org http://risorsegratis.webarrivo.com
#5 Wed 29 Nov, 2006 19:19

TheSteffen Joined: August 2006 Posts: 1607 Location: Magdeburg	Re: 058-015 - Admin Hacks List SQL Injection Thanks a lot
#6 Fri 01 Dec, 2006 14:03

Page 1 of 1

Was this topic useful?

Link this topic
URL
BBCode
HTML

The time now is Sun 19 May, 2013 10:15 • All times are UTC + 1 Hour [DST enabled]

Permissions List

You cannot post new topics
You cannot reply to topics
You cannot edit your posts
You cannot delete your posts
You cannot vote in polls
You cannot attach files
You can download files
You cannot post calendar events

Icy Phoenix

058-015 - Admin Hacks List SQL Injection

Was this topic useful?

Was this topic useful?