PHP-Nuke'un 7.8 sayılı sürümündeki Search (Arama) modülünde açık bulundu. Arama kutusuna yazılan bazı kodlarla, yönetici bilgileri ele geçirilmektedir. Bu açığı kapatmak için aşağıdaki kodları, modules/Search/index.php'dekilerle değiştiriniz: DİKKAT: Bu açık yamalı sürümlerde de bulunmakta!!!
<?php
/************************************************************************/ /* PHP-NUKE: Web Portal System */ /* =========================== */ /* */ /* Copyright (c) 2005 by Francisco Burzi */ /*http://phpnuke.org */ /* */ /* This program is free software. You can redistribute it and/or modify */ /* it under the terms of the GNU General Public License as published by */ /* the Free Software Foundation; either version 2 of the License. */ /************************************************************************/
if (!defined('MODULE_FILE')) { die ("You can't access this file directly..."); }
$next=$min+$offset; if ($x>=9) { print "<br><br><center><a href=\"modules.php?name=$module_name&author=$author&topic=$t&min=$max&query=$query&type=$type\">"; print "<b>"._NEXTMATCHES."</b></a></center>"; } } } CloseTable(); $mod1 = $mod2 = $mod3 = ""; if (isset($query) AND !empty($query)) { echo "<br>"; if (is_active("Downloads")) { $dcnt = $db->sql_numrows($db->sql_query("SELECT * from ".$prefix."_downloads_downloads WHERE title LIKE '%$query%' OR description LIKE '%$query%'")); $mod1 = "<li> <a href=\"modules.php?name=Downloads&d_op=search&query=$query\">"._DOWNLOADS."</a> ($dcnt "._SEARCHRESULTS.")"; } if (is_active("Web_Links")) { $lcnt = $db->sql_numrows($db->sql_query("SELECT * from ".$prefix."_links_links WHERE title LIKE '%$query%' OR description LIKE '%$query%'")); $mod2 = "<li> <a href=\"modules.php?name=Web_Links&l_op=search&query=$query\">"._WEBLINKS."</a> ($lcnt "._SEARCHRESULTS.")"; } if (is_active("Encyclopedia")) { $ecnt1 = $db->sql_query("SELECT eid from ".$prefix."_encyclopedia WHERE active='1'"); $ecnt = 0; while($row_e = $db->sql_fetchrow($ecnt1)) { $eid = intval($row_e['eid']); $ecnt2 = $db->sql_numrows($db->sql_query("select * from ".$prefix."_encyclopedia WHERE title LIKE '%$query%' OR description LIKE '%$query%' AND eid='$eid'")); $ecnt3 = $db->sql_numrows($db->sql_query("select * from ".$prefix."_encyclopedia_text WHERE title LIKE '%$query%' OR text LIKE '%$query%' AND eid='$eid'")); $ecnt = $ecnt+$ecnt2+$ecnt3; } $mod3 = "<li> <a href=\"modules.php?name=Encyclopedia&file=search&query=$query\">"._ENCYCLOPEDIA."</a> ($ecnt "._SEARCHRESULTS.")"; } OpenTable(); echo "<font class=\"title\">"._FINDMORE."<br><br>" .""._DIDNOTFIND."</font><br><br>" .""._SEARCH." \"<b>$query</b>\" "._ON.":<br><br>" ."<ul>" ."$mod1" ."$mod2" ."$mod3" ."<li> <a href=\"http://www.google.com/search?q=$query\" target=\"new\">Google</a>" ."<li> <a href=\"http://groups.google.com/groups?q=$query\" target=\"new\">Google Groups</a>" ."</ul>"; CloseTable(); } include("footer.php"); break; }
--------------------------------------------------------------------------------------------------------------------- anlayanlar bir incelesin doğruluk payı nedir ne değildir ben pek anlamam sadece tesadüfen böyle bir haberi buldum kolay gelsin