 |
Account Menu
Hosting Services
Dedicated Servers
Domain Services
IP.Board Services
CashCrusader
Plugins
Support
Resources
|
|
|
 |
CashCrusader adstats2.php critical vulnerability
|
|
Vulnerability information |
|
Discovered by:
|
Jutaky, PolarWeb Ltd
|
|
Release Date:
|
October 16th 2007
|
|
Software:
|
CashCrusader / adstats2.php addon page
|
|
Critical:
|
Highly critical
|
|
Impact:
|
Complete read access to CashCrusader database
|
|
How:
|
From remote / browser
|
|
Solution:
|
3rd party patch
|
|
|
Patch |
Edit the beginning of the adstats2.php file and replace
<? include("setup.php");?>
with
<?
$_GET['advertiser'] = ereg_replace("[^a-zA-Z0-9]", "", $_GET[advertiser]);
include("setup.php");?>
|
We can install this patch for you. To order the installation service click HERE
|
|
|
|
99.9% Uptime!
