Welcome to Geeklog, Anonymous Friday, April 04 2025 @ 10:46 am EDT

Geeklog Forums

Exploit published on milw0rm for

Post New Reply

Author:

Mood:

Code

Font Color Font Size Close Tags

Forum BBCode Help

BBCode	Effect
[b]bolded text[/b]	bolded text
[i]italicized text[/i]	italicized text
[u]underlined text[/u]	underlined text
[s]strikethrough text[/s]	strikethrough text
[img]http://www.site.com/forum/images/forum.png[/img] OR [img h=65 w=50]http://www.site.com/forum/images/forum.png[/img]
[url=https://www.geeklog.net]Geeklog[/url]	Geeklog
[quote]quoted text[/quote]	To quote: quoted text
[size=15]Your Text[/size] "12" is usually standard on message boards. Usually measured in pixels (px).	Your Text
[color=red]Red Text[/color] OR [color=#FF0000]Red Text[/color] Can use many different color names or hex codes.	Red Text
[list] []List item 1 []List item 2 [/list] OR [list=1] []List item 1 []List item 2 [/list]	List item 1 List item 2 List item 1 List item 2
[code]monospaced text[/code]	monospaced text
[code=XYX]formatted code[/code] Where XYZ can be any of the following: c css html4strict java javascript jquery perl php plain python SQL and many more...	formatted code
To enter a backslash (\) in your post, use \\\\	\

Subject

[QUOTE][u]Quote by: Dirk[/u][p]When upgrading, the recommendation is to remove all the old files first - exactly for cases like this, where the file was removed from newer versions.

In 1.5.0, there's an upload script (within FCKeditor) in a different location. So I guess in theory this should also work on 1.5.0 if you changed the URL.

I say in theory because I couldn't get it to work, neither with 1.4.1 nor 1.5.0.

For the moment, though, it probably can't hurt to disable the upload in FCKeditor entirely - or remove the public "fckeditor" directory.

On 1.4.1, edit public_html/fckeditor/editor/filemanager/upload/php/config.php
On 1.5.0, edit public_html/fckeditor/editor/filemanager/connectors/php/config.php

In both cases, find the line that reads [code]$Config['Enabled'] = true ;[/code] and change it to read [code]$Config['Enabled'] = false;[/code]

Note: Since this exploit does try to access FCKeditor directly, it won't matter if you have the "Advanced Editor" enabled in Geeklog or not. Do the above in any case.

We're still looking into the issue and let you know when we find anything.

Anyone wanting to provide more information, please do so at our [url=http://www.geeklog.net/staticpages/index.php/GeeklogSecurity]security contact address[/url]. Thanks.

bye, Dirk[/p][/QUOTE]

Options:

HTML Mode

Geeklog Forums

Search

Resources

About

Getting started

Support

Development

Topics

User Functions

What's New

Articles last 4 weeks

Comments last 4 weeks

Pages last 4 weeks

Links last 4 weeks

Downloads last 4 weeks