chantown Posted December 25, 2007 Share Posted December 25, 2007 I know that my site currently is vulnerable to security errors, can someone please tell me if there are any of those holes? There are many bugs in it, but since they're minor, I don't really care about them (unless they're major) thanks! my new site is www.skoogo.com Link to comment Share on other sites More sharing options...
Coreye Posted December 25, 2007 Share Posted December 25, 2007 Full Path Disclosure: http://www.skoogo.com/admin.php Notice: Undefined index: userlevel in /var/www/html/admin.php on line 29 Link to comment Share on other sites More sharing options...
anthrt Posted December 26, 2007 Share Posted December 26, 2007 http://www.skoogo.com/search.php?subsearchforum= Link to comment Share on other sites More sharing options...
chantown Posted December 26, 2007 Author Share Posted December 26, 2007 thanks guyz, is it a big problem if the absolute path is revealed? Link to comment Share on other sites More sharing options...
agentsteal Posted December 26, 2007 Share Posted December 26, 2007 Array: http://www.skoogo.com/search.php?search_forum_text[] Cross Site Scripting: http://www.skoogo.com/search.php?search_forum_text="><marquee><h1>vulnerable</marquee> Drop Down Menu: If you edit the drop down menus on the search page you can submit arbitrary values. Full Path Disclosure: http://www.skoogo.com/misc/auto/book_auto.php <b>Notice</b>: Undefined index: input in <b>/var/www/html/misc/auto/book_auto.php</b> on line <b>15</b><br /> Full Path Disclosure: http://www.skoogo.com/misc/auto/concentration_auto.php <b>Notice</b>: Undefined index: input in <b>/var/www/html/misc/auto/concentration_auto.php</b> on line <b>15</b><br /> Full Path Disclosure: http://www.skoogo.com/misc/auto/network_auto.php <b>Notice</b>: Undefined index: input in <b>/var/www/html/misc/auto/network_auto.php</b> on line <b>15</b><br /> Full Path Disclosure: http://www.skoogo.com/misc/auto/school_auto.php <b>Notice</b>: Undefined index: input in <b>/var/www/html/misc/auto/school_auto.php</b> on line <b>15</b><br /> Full Path Disclosure: http://www.skoogo.com/misc/auto/test.php <b>Notice</b>: Undefined index: input in <b>/var/www/html/misc/auto/test.php</b> on line <b>15</b><br /> Full Path Disclosure: http://www.skoogo.com/misc/auto/test_auto.php <b>Notice</b>: Undefined index: input in <b>/var/www/html/misc/auto/test_auto.php</b> on line <b>15</b><br /> Full Path Disclosure: http://www.skoogo.com/misc/auto/default.php <b>Notice</b>: Undefined index: input in <b>/var/www/html/misc/auto/default.php</b> on line <b>222</b><br /> Full Path Disclosure: http://www.skoogo.com/userinfo.php?user[] Notice: Array to string conversion in /var/www/html/userinfo.php on line 8 Full Path Disclosure: http://www.skoogo.com/register.php?code[] Notice: Array to string conversion in /var/www/html/register.php on line 70 Full Path Disclosure: http://www.skoogo.com/search.php?subsearchforum Notice: Undefined index: search_forum_text in /var/www/html/search.php on line 18 Notice: Undefined index: action in /var/www/html/search.php on line 18 Notice: Undefined index: titleonly in /var/www/html/include/database/db_publish.php on line 310 Full Path Disclosure: http://www.skoogo.com/templates/filters/filter_t.php Notice: Undefined variable: session in /var/www/html/templates/filters/filter_t.php on line 12 Notice: Trying to get property of non-object in /var/www/html/templates/filters/filter_t.php on line 12 Notice: Undefined variable: concentrationTable in /var/www/html/templates/filters/filter_t.php on line 78 Notice: Undefined variable: counselor in /var/www/html/templates/filters/filter_t.php on line 99 Fatal error: Call to a member function getNetworkInfo() on a non-object in /var/www/html/templates/filters/filter_t.php on line 99 Full Path Disclosure: http://www.skoogo.com/templates/filters/keywords_t.php <br /> <b>Notice</b>: Undefined variable: session in <b>/var/www/html/templates/filters/keywords_t.php</b> on line <b>16</b><br /> <br /> <b>Notice</b>: Trying to get property of non-object in <b>/var/www/html/templates/filters/keywords_t.php</b> on line <b>16</b><br /> Full Path Disclosure: http://www.skoogo.com/templates/filters/book/addbook_t.php Notice: Undefined variable: form in /var/www/html/templates/filters/book/addbook_t.php on line 4 Fatal error: Call to a member function error() on a non-object in /var/www/html/templates/filters/book/addbook_t.php on line 4 Full Path Disclosure: http://www.skoogo.com/templates/filters/book/book_t.php Notice: Undefined variable: bookTable in /var/www/html/templates/filters/book/book_t.php on line 9 Full Path Disclosure: http://www.skoogo.com/templates/filters/concentration/concentration_news_t.php Notice: Undefined variable: session in /var/www/html/templates/filters/concentration/concentration_news_t.php on line 11 Notice: Trying to get property of non-object in /var/www/html/templates/filters/concentration/concentration_news_t.php on line 11 Full Path Disclosure: http://www.skoogo.com/templates/filters/concentration/concentration_t.php Notice: Undefined variable: concentrationTable in /var/www/html/templates/filters/concentration/concentration_t.php on line 4 Full Path Disclosure: http://www.skoogo.com/templates/filters/course/addcourse_t.php Notice: Undefined variable: form in /var/www/html/templates/filters/course/addcourse_t.php on line 2 Fatal error: Call to a member function error() on a non-object in /var/www/html/templates/filters/course/addcourse_t.php on line 2 Full Path Disclosure: http://www.skoogo.com/templates/filters/course/course_t.php Notice: Undefined variable: courseTable in /var/www/html/templates/filters/course/course_t.php on line 7 You do not have any courses at this time. Full Path Disclosure: http://www.skoogo.com/templates/filters/course/searchcourse_t.php Notice: Undefined index: network_name in /var/www/html/templates/filters/course/searchcourse_t.php on line 22 Notice: Undefined index: network_id in /var/www/html/templates/filters/course/searchcourse_t.php on line 22 Full Path Disclosure: http://www.skoogo.com/templates/filters/network/addnetwork_t.php Notice: Undefined variable: form in /var/www/html/templates/filters/network/addnetwork_t.php on line 2 Fatal error: Call to a member function error() on a non-object in /var/www/html/templates/filters/network/addnetwork_t.php on line 2 Full Path Disclosure: http://www.skoogo.com/templates/filters/network/network_news_t.php Notice: Undefined variable: session in /var/www/html/templates/filters/network/network_news_t.php on line 11 Notice: Trying to get property of non-object in /var/www/html/templates/filters/network/network_news_t.php on line 11 Full Path Disclosure: http://www.skoogo.com/templates/filters/network/network_t.php Notice: Undefined variable: counselor in /var/www/html/templates/filters/network/network_t.php on line 4 Notice: Trying to get property of non-object in /var/www/html/templates/filters/network/network_t.php on line 4 Notice: Undefined variable: network_id in /var/www/html/templates/filters/network/network_t.php on line 6 Full Path Disclosure: http://www.skoogo.com/templates/forum/editpost_t.php Notice: Undefined variable: publish in /var/www/html/templates/forum/editpost_t.php on line 7 Notice: Trying to get property of non-object in /var/www/html/templates/forum/editpost_t.php on line 7 Notice: Undefined variable: form in /var/www/html/templates/forum/editpost_t.php on line 12 Fatal error: Call to a member function error() on a non-object in /var/www/html/templates/forum/editpost_t.php on line 12 Full Path Disclosure: http://www.skoogo.com/templates/forum/newtopic_t.php Notice: Undefined variable: publish in /var/www/html/templates/forum/newtopic_t.php on line 3 Fatal error: Call to a member function generateParentForum() on a non-object in /var/www/html/templates/forum/newtopic_t.php on line 3 Full Path Disclosure: http://www.skoogo.com/templates/forum/replytopic_t.php Notice: Undefined variable: publish in /var/www/html/templates/forum/replytopic_t.php on line 6 Notice: Trying to get property of non-object in /var/www/html/templates/forum/replytopic_t.php on line 6 Notice: Undefined variable: form in /var/www/html/templates/forum/replytopic_t.php on line 10 Fatal error: Call to a member function error() on a non-object in /var/www/html/templates/forum/replytopic_t.php on line 10 Full Path Disclosure: http://www.skoogo.com/templates/forum/topiclist_fp_small_t.php Notice: Undefined variable: numberOfElements in /var/www/html/templates/forum/topiclist_fp_small_t.php on line 31 Notice: Undefined index: tab in /var/www/html/templates/forum/topiclist_fp_small_t.php on line 10 Notice: Undefined variable: viewListTitle in /var/www/html/templates/forum/topiclist_fp_small_t.php on line 14 Fatal error: Call to undefined function pageLinksGenerate() in /var/www/html/templates/forum/topiclist_fp_small_t.php on line 81 Full Path Disclosure: http://www.skoogo.com/templates/forum/topiclist_fp_t.php Notice: Undefined index: tab in /var/www/html/templates/forum/topiclist_fp_t.php on line 10 Notice: Undefined variable: viewListTitle in /var/www/html/templates/forum/topiclist_fp_t.php on line 14 Fatal error: Call to undefined function pageLinksGenerate() in /var/www/html/templates/forum/topiclist_fp_t.php on line 24 Full Path Disclosure: http://www.skoogo.com/templates/forum/topiclist_t.php Notice: Undefined variable: publish in /var/www/html/templates/forum/topiclist_t.php on line 7 Fatal error: Call to a member function generateParentForum() on a non-object in /var/www/html/templates/forum/topiclist_t.php on line 7 Full Path Disclosure: http://www.skoogo.com/templates/forum/viewtopic_t.php Notice: Undefined variable: form in /var/www/html/templates/forum/viewtopic_t.php on line 2 Fatal error: Call to a member function error() on a non-object in /var/www/html/templates/forum/viewtopic_t.php on line 2 Full Path Disclosure: http://www.skoogo.com/templates/index2_t.php Notice: Undefined variable: session in /var/www/html/templates/index2_t.php on line 39 Notice: Trying to get property of non-object in /var/www/html/templates/index2_t.php on line 39 Notice: Undefined variable: counselor in /var/www/html/templates/index2_t.php on line 39 Notice: Trying to get property of non-object in /var/www/html/templates/index2_t.php on line 39 Notice: Undefined variable: concentrationTable in /var/www/html/templates/index2_t.php on line 49 Notice: Undefined variable: courseTable in /var/www/html/templates/index2_t.php on line 57 Notice: Undefined variable: bookTable in /var/www/html/templates/index2_t.php on line 65 Notice: Undefined variable: session in /var/www/html/templates/filters/network/network_news_t.php on line 11 Notice: Trying to get property of non-object in /var/www/html/templates/filters/network/network_news_t.php on line 11 Full Path Disclosure: http://www.skoogo.com/templates/index3_t.php Notice: Undefined variable: counselor in /var/www/html/templates/index3_t.php on line 9 Fatal error: Call to a member function getNetworkInfo() on a non-object in /var/www/html/templates/index3_t.php on line 9 Full Path Disclosure: http://www.skoogo.com/templates/misc/contact_t.php Notice: Undefined variable: contact in /var/www/html/templates/misc/contact_t.php on line 5 Full Path Disclosure: http://www.skoogo.com/templates/misc/forgotpass_t.php Notice: Undefined variable: form in /var/www/html/templates/misc/forgotpass_t.php on line 51 Fatal error: Call to a member function value() on a non-object in /var/www/html/templates/misc/forgotpass_t.php on line 51 Full Path Disclosure: http://www.skoogo.com/templates/misc/search_results_t.php Notice: Undefined variable: searchResultArray in /var/www/html/templates/misc/search_results_t.php on line 5 Full Path Disclosure: http://www.skoogo.com/templates/misc/reportpost_t.php <b>Notice</b>: Undefined index: action in <b>/var/www/html/templates/misc/reportpost_t.php</b> on line <b>20</b><br /> <br /> <b>Notice</b>: Undefined index: topic in <b>/var/www/html/templates/misc/reportpost_t.php</b> on line <b>21</b><br /> <br /> <b>Notice</b>: Undefined index: post in <b>/var/www/html/templates/misc/reportpost_t.php</b> on line <b>22</b><br /> Full Path Disclosure: http://www.skoogo.com/templates/misc/search_t.php <br /> <b>Notice</b>: Undefined variable: session in <b>/var/www/html/templates/misc/search_t.php</b> on line <b>8</b><br /> <br /> <b>Notice</b>: Trying to get property of non-object in <b>/var/www/html/templates/misc/search_t.php</b> on line <b>8</b><br /> Full Path Disclosure: http://www.skoogo.com/templates/user/login_t.php Notice: Undefined variable: form in /var/www/html/templates/user/login_t.php on line 10 Fatal error: Call to a member function value() on a non-object in /var/www/html/templates/user/login_t.php on line 10 Full Path Disclosure: http://www.skoogo.com/templates/user/main.php Notice: Undefined variable: session in /var/www/html/templates/user/main.php on line 9 Notice: Trying to get property of non-object in /var/www/html/templates/user/main.php on line 9 Notice: Undefined variable: whichFrame in /var/www/html/templates/user/main.php on line 24 Notice: Undefined variable: whichFrame in /var/www/html/templates/user/main.php on line 24 Notice: Undefined variable: form in /var/www/html/templates/user/main.php on line 28 Notice: Trying to get property of non-object in /var/www/html/templates/user/main.php on line 28 Notice: Undefined variable: form in /var/www/html/templates/user/main.php on line 44 Fatal error: Call to a member function value() on a non-object in /var/www/html/templates/user/main.php on line 44 Full Path Disclosure: http://www.skoogo.com/templates/user/setprofile_t.php Notice: Undefined variable: form in /var/www/html/templates/user/setprofile_t.php on line 15 Fatal error: Call to a member function error() on a non-object in /var/www/html/templates/user/setprofile_t.php on line 15 Full Path Disclosure: http://www.skoogo.com/templates/user/useredit_t.php Notice: Undefined variable: session in /var/www/html/templates/user/useredit_t.php on line 19 Notice: Trying to get property of non-object in /var/www/html/templates/user/useredit_t.php on line 19 Full Path Disclosure: http://www.skoogo.com/templates/user/userinfo_t.php Notice: Undefined variable: userInfoArray in /var/www/html/templates/user/userinfo_t.php on line 9 Notice: Undefined variable: userInfoArray in /var/www/html/templates/user/userinfo_t.php on line 17 Notice: Undefined variable: userInfoArray in /var/www/html/templates/user/userinfo_t.php on line 21 Notice: Undefined variable: userInfoArray in /var/www/html/templates/user/userinfo_t.php on line 35 Notice: Undefined variable: userInfoArray in /var/www/html/templates/user/userinfo_t.php on line 37 Notice: Undefined variable: userInfoArray in /var/www/html/templates/user/userinfo_t.php on line 39 Notice: Undefined variable: userInfoArray in /var/www/html/templates/user/userinfo_t.php on line 45 Notice: Undefined variable: userInfoArray in /var/www/html/templates/user/userinfo_t.php on line 49 Notice: Undefined variable: userInfoArray in /var/www/html/templates/user/userinfo_t.php on line 53 Notice: Undefined variable: userInfoArray in /var/www/html/templates/user/userinfo_t.php on line 60 Notice: Undefined variable: session in /var/www/html/templates/user/userinfo_t.php on line 66 Fatal error: Call to a member function isLoggedIn() on a non-object in /var/www/html/templates/user/userinfo_t.php on line 66 Full Path Disclosure: http://www.skoogo.com/phpinfo.php SQL Injection: http://www.skoogo.com/viewtopic.php?action=g&topic=20"+and+"1"="0 http://www.skoogo.com/viewtopic.php?action=g&topic=20"+and+"1"="1 Link to comment Share on other sites More sharing options...
chantown Posted December 26, 2007 Author Share Posted December 26, 2007 wow thank you so much how do you guys know all this stuff??? Link to comment Share on other sites More sharing options...
chantown Posted December 26, 2007 Author Share Posted December 26, 2007 agensteal, i ahve a question- how did you find my files (did you scan the site)? How did you find my templates folder? Link to comment Share on other sites More sharing options...
Recommended Posts