<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0">
	<channel>
		<title><![CDATA[Latest posts for the topic "Vulnerabilities in png counter."]]></title>
		<link>https://proxy2.de/forum/posts/list/3.php</link>
		<description><![CDATA[Latest messages posted in the topic "Vulnerabilities in png counter."]]></description>
		<generator>JForum - http://www.jforum.net</generator>
			<item>
				<title>Vulnerabilities in png counter.</title>
				<description><![CDATA[ There are a couple vulnerabilities in png counter that can allow mysql injection or writing of files outside of the page directory.<br /> <br /> To fix it change this:<br /> <br /> [code]$page = &#40;!isset&#40;$HTTP_GET_VARS&#91;'page'&#93;&#41;&#41; ? &quot;count&quot; &#58; $HTTP_GET_VARS&#91;'page'&#93;;<br /> $digit = &#40;!isset&#40;$HTTP_GET_VARS&#91;'digit'&#93;&#41;&#41; ? &quot;scoreboard&quot; &#58; $HTTP_GET_VARS&#91;'digit'&#93;;<br /> [/code]<br /> <br /> To this:<br /> <br /> [code]$_GET&#91;'page'&#93; = str_replace&#40;&quot;..&quot;,&quot;&quot;,$_GET&#91;'page'&#93;&#41;;<br /> $_GET&#91;'page'&#93; = str_replace&#40;&quot;/&quot;,&quot;&quot;,$_GET&#91;'page'&#93;&#41;;<br /> $_GET&#91;'digit'&#93; = str_replace&#40;&quot;..&quot;,&quot;&quot;,$_GET&#91;'digit'&#93;&#41;;<br /> $_GET&#91;'digit'&#93; = str_replace&#40;&quot;/&quot;,&quot;&quot;,$_GET&#91;'digit'&#93;&#41;;<br /> <br /> $page = &#40;!isset&#40;$_GET&#91;'page'&#93;&#41;&#41; ? &quot;count&quot; &#58; $_GET&#91;'page'&#93;;<br /> $digit = &#40;!isset&#40;$_GET&#91;'digit'&#93;&#41;&#41; ? &quot;scoreboard&quot; &#58; $_GET&#91;'digit'&#93;;<br /> [/code]<br /> <br /> And add above line:<br /> <br /> [code]        $sql = &quot;SELECT page,count FROM counter WHERE page = '$page'&quot;;[/code]<br /> <br /> <br /> This:<br /> <br /> [code]        $page = mysql_real_escape_string&#40;$page&#41;;[/code]]]></description>
				<guid isPermaLink="true">https://proxy2.de/forum/posts/preList/7293/24659.php</guid>
				<link>https://proxy2.de/forum/posts/preList/7293/24659.php</link>
				<pubDate><![CDATA[Sun, 26 Apr 2009 23:54:15]]> GMT</pubDate>
				<author><![CDATA[ cartman-2000]]></author>
			</item>
			<item>
				<title></title>
				<description><![CDATA[ I have passed this information on to Chi Kien Uong.]]></description>
				<guid isPermaLink="true">https://proxy2.de/forum/posts/preList/7293/24661.php</guid>
				<link>https://proxy2.de/forum/posts/preList/7293/24661.php</link>
				<pubDate><![CDATA[Mon, 27 Apr 2009 09:00:00]]> GMT</pubDate>
				<author><![CDATA[ Carbonize]]></author>
			</item>
	</channel>
</rss>