Reply to thread

Message

<blockquote data-quote="Jerry" data-source="post: 291693" data-attributes="member: 35321">Hi,So you guys have some problem with revcms??Oke let we fix the exploit<img src="/styles/icons/smile/youDontSay.png"&nbsp; class="smilie" loading="lazy" alt="youDontSay" title="You don't say?&nbsp; &nbsp; youDontSay" data-shortname="youDontSay" />Find final public function forgotten() (class.users.php) and delete the whole function!Go to class.core.php and delete everything that looks like this case &quot;forgot&quot;: [PHP]DELETE :case &quot;forgot&quot;:$users-&gt;forgotten();break;DELETE :case &quot;forgot&quot;:header('Location: '.$_CONFIG['hotel']['url'].'/me');exit;break;[/PHP]Yeah you fixed the exploit! Nobody can change your password now!!How was this could be used (Shame for the big retros)How to find :By logging everything in your cms ;I Special thanks to Spot IfyFound by searching into the logs :And then found this :The guy used this to change the password :<a href="http://92.108.165.99:8080/hak2.phpsite=http://retrolink/forgot&amp;username=blablabla&amp;password=habbo8&amp;key=" target="_blank">http://92.108.165.99:8080/hak2.phpsi...rd=habbo8&amp;key=</a>He also could use post form to change the password since you guys are stupid to put seckey to NULL or 1234 XDOwner who destroyed all your things Ricardo ... Owner : weebz.netMaybe something you guys need to do:Maybe a like for me, Sir Jamal and Sopt Ify!!</blockquote>

[QUOTE="Jerry, post: 291693, member: 35321"] Hi, So you guys have some problem with revcms?? [B]Oke let we fix the exploit[/B]youDontSay Find [B]final public function forgotten()[/B] (class.users.php) and delete the whole function! Go to class.core.php and delete everything that looks like this case "forgot": [PHP]DELETE : case "forgot": $users->forgotten(); break; DELETE : case "forgot": header('Location: '.$_CONFIG['hotel']['url'].'/me'); exit; break;[/PHP] Yeah you fixed the exploit! Nobody can change your password now!! How was this could be used (Shame for the big retros) [B]How to find :By logging everything in your cms ;I Special thanks to Spot Ify [B]Found by searching into the logs : And then found this :[/B][/B] [B][B][/B] The guy used this to change the password :[/B] [URL='http://92.108.165.99:8080/hak2.phpsite=http://retrolink/forgot&username=blablabla&password=habbo8&key='][B]http://92.108.165.99:8080/hak2.phpsi...rd=habbo8&key=[/B][/URL] He also could use post form to change the password since you guys are stupid to put seckey to NULL or 1234 XD Owner who destroyed all your things Ricardo ... Owner : weebz.net [B]Maybe something you guys need to do:[/B] [B] [/B] Maybe a like for me, Sir Jamal and Sopt Ify!! [/QUOTE]

Verification

Reply to thread

Connect with us

Newest members