-
Notifications
You must be signed in to change notification settings - Fork 39
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
SQL Injection in "module" parameter of phpWebSite CMS #293
Comments
These are incredibly old instances of phpWebsite. In some cases over a decade old. |
How can you tell? |
Well, a few have copyright dates of 2006. Pagemaster isn't a module anymore and the position= references layout positioning from phpWebsite pre 1.x Those sites are Ooooold. So very old. |
ok I deploy a new vps, then wget the master.zip, unzip, intall lamp (via tasksel), mv diretory to /html access via browser and I get this error: http://pastebin.com/MtsBZ48u So i did something i can't recall with composer, and somehow i got a new page, sying phpwebsite couldn't install because you need to compile GK something.. Could you point me any instrucions ? |
@PauloChoupina You need to run |
Got it. I will get back to it when i got the time. Thank you and sorry about about the worng perception. btw, I registed a cve and did a exploit request to exploit-db, so if this is a old dated version, this is going to create some confusion.. xD i will try to cancel the publishing of the exploit Sorry guys xD |
SQL Injection in "module" parameter of phpWebSite CMS
Google dork:
"powered by phpWebSite"+inurl:index.php?module=pagemaster
examples:
http://leaf.sourceforge.net/bering-uclibc/index.php?module=pagemaster&PAGE_user_op=view_page&PAGE_id=12
http://www.18to1.com/index.php?module=pagemaster&PAGE_user_op=view_page&PAGE_id=6&MMN_position=8:8
http://www.fflach.co.uk/cms/index.php?module=pagemaster&PAGE_user_op=view_page&PAGE_id=9&MMN_position=13:13
http://www.capitalfamilymd.com/index.php?module=pagemaster&PAGE_user_op=view_page&PAGE_id=12&MMN_position=23:23
http://www.buckwheat.info/index.php?module=pagemaster&PAGE_user_op=view_page&PAGE_id=21&MMN_position=24:24
The text was updated successfully, but these errors were encountered: