The Arcive of Official vBulletin Modifications Site.It is not a VB3 engine, just a parsed copy! |
|
#1
|
||||
|
||||
Possible security issue with a mod, hack attempt?
Hi everyone
I got some strange database errors this morning which seemed to emanate from the vbimagehosting mod. I'm not sure if it is anything to be concerned about as I've got no idea what it all means, but maybe someone has found a security flaw in the mod? These are a few of the errors I was receiving, take note of the end of the url's. Code:
http://*****.com/vbimghost.php?do=userlist&pp=20&page=/etc/passwd Code:
http://*****.com/vbimghost.php?do=userlist&pp=20&page=/../../../../../../../../../../etc/passwd Code:
http://*****.com/vbimghost.php?do=userlist&pp=20&page=/etc/passwd%00 Code:
http://*****.com/vbimghost.php?do=userlist&pp=20&page=/proc/self/environ%00 Thanks. |
Thread Tools | |
Display Modes | |
|
|
X vBulletin 3.8.12 by vBS Debug Information | |
---|---|
|
|
More Information | |
Template Usage:
Phrase Groups Available:
|
Included Files:
Hooks Called:
|