Go Back   vb.org Archive > vBulletin Modifications > Archive > vB.org Archives > Premium Archives > uCash & uShop
uCash & uShop old support and thank you thread Details »»
uCash & uShop old support and thank you thread
Version: , by BarHopper BarHopper is offline
Developer Last Online: Aug 2005 Show Printable Version Email this Page

Version: Unknown Rating:
Released: 04-12-2004 Last Update: Never Installs: 0
 
No support by the author.

/me Installs. I'm the first for the most aniticipated hack!!1

Show Your Support

  • This modification may not be copied, reproduced or published elsewhere without author's permission.

Comments
  #672  
Old 04-22-2004, 03:48 AM
FrOgZ FrOgZ is offline
 
Join Date: Aug 2003
Posts: 24
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

g0g0g0 fix before they abuse it more
Reply With Quote
  #673  
Old 04-22-2004, 11:10 AM
poetic poetic is offline
 
Join Date: Apr 2003
Posts: 125
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Well can anyone figure out why alot of us get NO actions Found ??? HeyFrogz its flyeyes :-p
Reply With Quote
  #674  
Old 04-22-2004, 01:21 PM
GenSec GenSec is offline
 
Join Date: Oct 2001
Posts: 156
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by poetic
Well can anyone figure out why alot of us get NO actions Found ??? HeyFrogz its flyeyes :-p
Just be carefull adding code in global.php.
It should be placed near the end of global.php file.
Reply With Quote
  #675  
Old 04-22-2004, 02:03 PM
lasto lasto is offline
 
Join Date: Jan 2002
Posts: 1,514
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Looks like someone found a loophole in a script somewhere, and they're executing SQL through it. Be glad they're not doing a "DROP TABLE `post`" or anything like that
so whats the crack with the users runing a sql query - which i dont understand really as how can members gain access to the database by way of the store?
If so this is a serious problem for any of us using this hack and as such i have disabled the store for use by members till this problem is sorted or until im told it is`nt the store that has the problem.
Reply With Quote
  #676  
Old 04-22-2004, 04:55 PM
poetic poetic is offline
 
Join Date: Apr 2003
Posts: 125
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

well now that i think of it I think i already had this installed at one time on these files and just redid the styles so the tempaltes reset so im wondering why it isnt working because it was working before so i might be a problem with the warn.php or the html you put in the postbit
Reply With Quote
  #677  
Old 04-22-2004, 09:46 PM
FrOgZ FrOgZ is offline
 
Join Date: Aug 2003
Posts: 24
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

try updating vB :O
Reply With Quote
  #678  
Old 04-23-2004, 12:25 AM
lasto lasto is offline
 
Join Date: Jan 2002
Posts: 1,514
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Is there a potential problem with this store or not ?

Feedback to a problem like this is nessecary for every member who may wish to install it or has done.

https://vborg.vbsupport.ru/showpost....&postcount=676
Reply With Quote
  #679  
Old 04-23-2004, 08:43 AM
sabret00the's Avatar
sabret00the sabret00the is offline
 
Join Date: Jan 2003
Location: London
Posts: 5,268
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

yup that's a very serious problem
Reply With Quote
  #680  
Old 04-23-2004, 01:48 PM
dieKetzer dieKetzer is offline
 
Join Date: Mar 2002
Location: melbourne, australia
Posts: 106
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

somebody gonna address this? this is an important question for a few of us...
Quote:
Originally Posted by lasto
so whats the crack with the users runing a sql query - which i dont understand really as how can members gain access to the database by way of the store?
If so this is a serious problem for any of us using this hack and as such i have disabled the store for use by members till this problem is sorted or until im told it is`nt the store that has the problem.
Reply With Quote
  #681  
Old 04-23-2004, 02:22 PM
Reeve of shinra's Avatar
Reeve of shinra Reeve of shinra is offline
 
Join Date: Oct 2001
Location: NYC
Posts: 1,896
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

How is thsi exploited?
Reply With Quote
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 03:01 AM.


Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2024, vBulletin Solutions Inc.
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.07319 seconds
  • Memory Usage 2,316KB
  • Queries Executed 28 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)ad_showthread_beforeqr
  • (3)bbcode_quote
  • (1)footer
  • (1)forumjump
  • (1)forumrules
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (1)modsystem_post
  • (1)navbar
  • (6)navbar_link
  • (120)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (4)pagenav_pagelink
  • (5)pagenav_pagelinkrel
  • (11)post_thanks_box
  • (11)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (11)post_thanks_postbit_info
  • (10)postbit
  • (11)postbit_onlinestatus
  • (11)postbit_wrapper
  • (1)spacer_close
  • (1)spacer_open
  • (1)tagbit_wrapper 

Phrase Groups Available:
  • global
  • inlinemod
  • postbit
  • posting
  • reputationlevel
  • showthread
Included Files:
  • ./showthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_post_thanks.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_postinfo_query
  • fetch_postinfo
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showthread_start
  • showthread_getinfo
  • forumjump
  • showthread_post_start
  • showthread_query_postids
  • showthread_query
  • bbcode_fetch_tags
  • bbcode_create
  • showthread_postbit_create
  • postbit_factory
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • fetch_musername
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • pagenav_page
  • pagenav_complete
  • tag_fetchbit_complete
  • forumrules
  • navbits
  • navbits_complete
  • showthread_complete