![Waraxe IT Security Portal](themes/Helius/images/logo.jpg) |
|
![](themes/Helius/images/7px.gif) |
![](themes/Helius/forums/images/top_left.gif) |
Menu |
![](themes/Helius/forums/images/top_right.gif) |
|
Home |
| |
|
Discussions |
| |
|
Tools |
| |
|
Affiliates |
| |
|
Content |
| |
|
Info |
| | |
|
|
|
|
![](themes/Helius/forums/images/top_left.gif) |
User Info |
![](themes/Helius/forums/images/top_right.gif) |
Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144
People Online:
Visitors: 75
Members: 0
Total: 75
|
|
|
|
|
![](themes/Helius/forums/images/top_left.gif) |
Full disclosure |
![](themes/Helius/forums/images/top_right.gif) |
|
|
![](themes/Helius/images/top_left.gif) |
|
![](themes/Helius/images/top_right.gif) |
![](themes/Helius/forums/images/logo1.gif) |
|
![](themes/Helius/forums/images/logo2.gif) |
IT Security and Insecurity Portal |
|
![](themes/Helius/forums/images/top_left.gif) |
info NukeSentinel 2.5.11 - 2.5.12 exploit |
![](themes/Helius/forums/images/top_right.gif) |
Posted: Wed Apr 23, 2008 11:02 am |
|
|
yamcho |
Regular user |
![Regular user Regular user](modules/Forums/images/ranks/rang2.gif)
![](modules/Forums/images/avatars/gallery/blank.gif) |
|
Joined: Mar 13, 2006 |
Posts: 6 |
|
|
|
![](themes/Helius/forums/images/spacer.gif) |
![](themes/Helius/forums/images/spacer.gif) |
![](themes/Helius/forums/images/post_corner.gif) |
|
|
|
|
|
![](themes/Helius/forums/images/spacer.gif) |
![](themes/Helius/forums/images/top_left.gif) |
|
![](themes/Helius/forums/images/top_right.gif) |
Posted: Wed Apr 23, 2008 11:42 am |
|
|
waraxe |
Site admin |
![Site admin Site admin](modules/Forums/images/ranks/rangad.gif)
![](modules/Forums/images/avatars/gallery/091.gif) |
|
Joined: May 11, 2004 |
Posts: 2407 |
Location: Estonia, Tartu |
|
|
![](themes/Helius/forums/images/spacer.gif) |
![](themes/Helius/forums/images/spacer.gif) |
![](themes/Helius/forums/images/post_corner.gif) |
|
These two security holes in Nuke Sentinel are hard-to-exploit. Blind sql injection methods must be used and yes, i wrote some proof-of-concept exploits, but did not publish them.
So - if you are sure, that your target is using old version NukeSentinel (most websites have been upgraded!), then read tutorials about sql injection, set up local test system with apache/mysql/php/phpnuke/nukesentinel and then write working exploit. It's not so hard. If you have questions - let me know, i am able to give out hints, but exploit(s) must be written by yourself. |
|
|
|
|
![](themes/Helius/forums/images/spacer.gif) |
![](themes/Helius/forums/images/top_left.gif) |
|
![](themes/Helius/forums/images/top_right.gif) |
Posted: Wed Apr 23, 2008 12:48 pm |
|
|
yamcho |
Regular user |
![Regular user Regular user](modules/Forums/images/ranks/rang2.gif)
![](modules/Forums/images/avatars/gallery/blank.gif) |
|
Joined: Mar 13, 2006 |
Posts: 6 |
|
|
|
![](themes/Helius/forums/images/spacer.gif) |
![](themes/Helius/forums/images/spacer.gif) |
![](themes/Helius/forums/images/post_corner.gif) |
|
ooo... of course!
i not wont an explit script... i already know the sql injection..
my only question is: when the script report in the advisory is execute?
the thing that i don't know is PhpNuke system.
i know that sentinell is a phpnuke module and that work with any page of that.
thks |
|
|
|
|
Posted: Wed Apr 23, 2008 12:52 pm |
|
|
yamcho |
Regular user |
![Regular user Regular user](modules/Forums/images/ranks/rang2.gif)
![](modules/Forums/images/avatars/gallery/blank.gif) |
|
Joined: Mar 13, 2006 |
Posts: 6 |
|
|
|
![](themes/Helius/forums/images/spacer.gif) |
![](themes/Helius/forums/images/spacer.gif) |
![](themes/Helius/forums/images/post_corner.gif) |
|
sorry 4 my horrible english ![Sad](modules/Forums/images/smiles/icon_sad.gif) |
|
|
|
|
Posted: Wed Apr 23, 2008 3:52 pm |
|
|
waraxe |
Site admin |
![Site admin Site admin](modules/Forums/images/ranks/rangad.gif)
![](modules/Forums/images/avatars/gallery/091.gif) |
|
Joined: May 11, 2004 |
Posts: 2407 |
Location: Estonia, Tartu |
|
|
![](themes/Helius/forums/images/spacer.gif) |
![](themes/Helius/forums/images/spacer.gif) |
![](themes/Helius/forums/images/post_corner.gif) |
|
|
|
|
|
Posted: Wed Apr 23, 2008 4:25 pm |
|
|
yamcho |
Regular user |
![Regular user Regular user](modules/Forums/images/ranks/rang2.gif)
![](modules/Forums/images/avatars/gallery/blank.gif) |
|
Joined: Mar 13, 2006 |
Posts: 6 |
|
|
|
![](themes/Helius/forums/images/spacer.gif) |
![](themes/Helius/forums/images/spacer.gif) |
![](themes/Helius/forums/images/post_corner.gif) |
|
|
|
|
|
www.waraxe.us Forum Index -> PhpNuke
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|