OpenRCE

📚 OpenRCE is preserved as a read-only archive. Launched at RECon Montreal in 2005. Registration and posting are disabled.

About Articles Book Store Distributed RCE Downloads Event Calendar Forums Live Discussion Reference Library RSS Feeds Search Users What's New

Customize Theme

Topic created on: January 17, 2006 05:33 CST by zeelock .

A

zeelock		January 17, 2006 05:43.46 CST
Nice to see that at least here there is not direct html injection as in rootkit.com in the blog topic and forum topic field... Edge v1 suffered also of a PHP code execution because the so called VAULT upload script doesn't perform a eit from the check function. http://edge.dev.box.sk/smsread.php?newsid=364 Bug in the Code: `if ($file != "") { if (!in_array($ext,$edge_extensions)) { echo "<center>File extension not allowed!</center>"; } ## It doest exit! if (file_exists("$user_dir/$file_name")) { echo "<center>File already exists!</center>"; }` (actually it's still possibile to attack sites that use edge v1 pretty easily) Good to use Edge V2...

aeppert		January 17, 2006 08:23.54 CST
Clearly we've passed the initial hack test. Thanks for trying!

pedram		January 17, 2006 14:57.26 CST
Yeah thanks ... I guess. Erasing forum posts is way too difficult a process so I guess we'll leave this here ... not too big a deal since we have some search functionality now we don't have to worry as much about "dirtying" up the forums.

Note: Registration is required to post to the forums.

There are 31,328 total registered users.

Imagery

SoySauce Blueprint
Jun 6, 2008