scferg Posted February 10, 2008 Share Posted February 10, 2008 After being hacked (once - mostly my fault), I know how scary it is thinking that everything could be destroyed within a very short period of time...my site's security is very important to me. So, I was wondering since you all know where to look for vulnerabilities if somebody could explore my site in search for security improvements or issues. My site: http://sims2news.com And if you do find a security problem, I'd appreciate it if you wouldn't exploit it Thanks! Link to comment Share on other sites More sharing options...
agentsteal Posted February 10, 2008 Share Posted February 10, 2008 Array: http://www.sims2news.com/premierhomes/index.php?filter[] Array: http://www.sims2news.com/premierhomes/mainframe/search.php?story[] Array: http://www.sims2news.com/premierhomes/mainframe/search.php?user[] Array: http://www.sims2news.com/premierhomes/mainframe/search.php?title[] Array: http://www.sims2news.com/private/premierhomes/index.php?filter[] Array: http://www.sims2news.com/private/premierhomes/mainframe/search.php?story[] Array: http://www.sims2news.com/private/premierhomes/mainframe/search.php?user[] Array: http://www.sims2news.com/private/premierhomes/mainframe/search.php?title[] CAPTCHA: The solution for the CAPTCHA is in the source code. Cross Site Scripting: http://www.sims2news.com/private/premierhomes/mainframe/search.php?title="><marquee><h1>vulnerable</marquee> Cross Site Scripting: http://www.sims2news.com/private/premierhomes/mainframe/search.php?user="><marquee><h1>vulnerable</marquee> Cross Site Scripting: http://www.sims2news.com/private/premierhomes/mainframe/search.php?story="><marquee><h1>vulnerable</marquee> Cross Site Scripting: http://www.sims2news.com/mobile.php?"><marquee><h1>vulnerable</marquee> Cross Site Scripting: http://www.sims2news.com/premierhomes/mainframe/search.php?title="><marquee><h1>vulnerable</marquee> Cross Site Scripting: http://www.sims2news.com/premierhomes/mainframe/search.php?user="><marquee><h1>vulnerable</marquee> Cross Site Scripting: http://www.sims2news.com/index.php?"><marquee><h1>vulnerable</marquee> Cross Site Scripting: http://www.sims2news.com/news/show_news.php?"><marquee><h1>vulnerable</marquee> Cross Site Scripting: http://www.sims2news.com/index.php?page=<marquee><h1>vulnerable</marquee> Cross Site Scripting: http://www.sims2news.com/premierhomes/mainframe/search.php?story="><marquee><h1>vulnerable</marquee> Directory Transversal: http://www.sims2news.com/premierhomes/index.php?filter=../index Directory Transversal: http://www.sims2news.com/private/premierhomes/index.php?filter=../../index DOS: http://www.sims2news.com/premierhomes/index.php?filter=index DOS: http://www.sims2news.com/private/premierhomes/index.php?filter=index Full Path Disclosure: http://www.sims2news.com/private/premierhomes/mainframe/show_news.php?subaction=showcomments Warning: Division by zero in /home/sims2new/public_html/private/premierhomes/mainframe/inc/functions.inc.php on line 469 Warning: Division by zero in /home/sims2new/public_html/private/premierhomes/mainframe/inc/functions.inc.php on line 469 Warning: Division by zero in /home/sims2new/public_html/private/premierhomes/mainframe/inc/functions.inc.php on line 469 Warning: Division by zero in /home/sims2new/public_html/private/premierhomes/mainframe/inc/functions.inc.php on line 469 Warning: Division by zero in /home/sims2new/public_html/private/premierhomes/mainframe/inc/functions.inc.php on line 469 Warning: Division by zero in /home/sims2new/public_html/private/premierhomes/mainframe/inc/functions.inc.php on line 469 Warning: Division by zero in /home/sims2new/public_html/private/premierhomes/mainframe/inc/functions.inc.php on line 469 Warning: Division by zero in /home/sims2new/public_html/private/premierhomes/mainframe/inc/functions.inc.php on line 469 Full Path Disclosure: http://www.sims2news.com/private/premierhomes/index.php?filter=../../index Warning: main(./news/show_news.php) [function.main]: failed to open stream: No such file or directory in /home/sims2new/public_html/index.php on line 142 Warning: main(./news/show_news.php) [function.main]: failed to open stream: No such file or directory in /home/sims2new/public_html/index.php on line 142 Warning: main() [function.include]: Failed opening './news/show_news.php' for inclusion (include_path='.:/usr/local/lib/php-4.4.7/lib/php') in /home/sims2new/public_html/index.php on line 142 Full Path Disclosure: http://www.sims2news.com/private/premierhomes/index.php?filter=a Warning: main(./a.php) [function.main]: failed to open stream: No such file or directory in /home/sims2new/public_html/private/premierhomes/index.php on line 264 Warning: main(./a.php) [function.main]: failed to open stream: No such file or directory in /home/sims2new/public_html/private/premierhomes/index.php on line 264 Warning: main() [function.include]: Failed opening './a.php' for inclusion (include_path='.:/usr/local/lib/php-4.4.7/lib/php') in /home/sims2new/public_html/private/premierhomes/index.php on line 264 Full Path Disclosure: http://www.sims2news.com/premierhomes/mainframe/show_news.php?subaction=showcomments Warning: Division by zero in /home/sims2new/public_html/premierhomes/mainframe/inc/functions.inc.php on line 469 Warning: Division by zero in /home/sims2new/public_html/premierhomes/mainframe/inc/functions.inc.php on line 469 Warning: Division by zero in /home/sims2new/public_html/premierhomes/mainframe/inc/functions.inc.php on line 469 Warning: Division by zero in /home/sims2new/public_html/premierhomes/mainframe/inc/functions.inc.php on line 469 Warning: Division by zero in /home/sims2new/public_html/premierhomes/mainframe/inc/functions.inc.php on line 469 Warning: Division by zero in /home/sims2new/public_html/premierhomes/mainframe/inc/functions.inc.php on line 469 Warning: Division by zero in /home/sims2new/public_html/premierhomes/mainframe/inc/functions.inc.php on line 469 Warning: Division by zero in /home/sims2new/public_html/premierhomes/mainframe/inc/functions.inc.php on line 469 Full Path Disclosure: http://www.sims2news.com/mobile.php?id[] Warning: htmlspecialchars() expects parameter 1 to be string, array given in /home/sims2new/public_html/news/inc/functions.inc.php on line 35 Full Path Disclosure: http://www.sims2news.com/mobile.php?subaction[] Warning: htmlspecialchars() expects parameter 1 to be string, array given in /home/sims2new/public_html/news/inc/functions.inc.php on line 34 Full Path Disclosure: http://www.sims2news.com/mobile.php?archive[] Warning: htmlspecialchars() expects parameter 1 to be string, array given in /home/sims2new/public_html/news/inc/functions.inc.php on line 33 Full Path Disclosure: http://www.sims2news.com/mobile.php?ucat[] Warning: htmlspecialchars() expects parameter 1 to be string, array given in /home/sims2new/public_html/news/inc/functions.inc.php on line 36 Full Path Disclosure: http://www.sims2news.com/mobile.php?start_from[] Warning: htmlspecialchars() expects parameter 1 to be string, array given in /home/sims2new/public_html/news/inc/functions.inc.php on line 32 Full Path Disclosure: http://www.sims2news.com/mobile.php?page[] Warning: preg_match() expects parameter 2 to be string, array given in /home/sims2new/public_html/index.php on line 131 Full Path Disclosure: http://www.sims2news.com/mobile.php?archive=a Warning: file(/home/sims2new/public_html/news/data/archives/a.news.arch) [function.file]: failed to open stream: No such file or directory in /home/sims2new/public_html/news/inc/shows.inc.php on line 616 Warning: Invalid argument supplied for foreach() in /home/sims2new/public_html/news/inc/shows.inc.php on line 621 Warning: Invalid argument supplied for foreach() in /home/sims2new/public_html/news/inc/shows.inc.php on line 654 Full Path Disclosure: http://www.sims2news.com/premierhomes/index.php?filter=../index Warning: main(./news/show_news.php) [function.main]: failed to open stream: No such file or directory in /home/sims2new/public_html/index.php on line 142 Warning: main(./news/show_news.php) [function.main]: failed to open stream: No such file or directory in /home/sims2new/public_html/index.php on line 142 Warning: main() [function.include]: Failed opening './news/show_news.php' for inclusion (include_path='.:/usr/local/lib/php-4.4.7/lib/php') in /home/sims2new/public_html/index.php on line 142 Full Path Disclosure: http://www.sims2news.com/index.php?id[] Warning: htmlspecialchars() expects parameter 1 to be string, array given in /home/sims2new/public_html/news/inc/functions.inc.php on line 35 Full Path Disclosure: http://www.sims2news.com/phpinfo.php Full Path Disclosure: http://www.sims2news.com/index.php?subaction[] Warning: htmlspecialchars() expects parameter 1 to be string, array given in /home/sims2new/public_html/news/inc/functions.inc.php on line 34 Full Path Disclosure: http://www.sims2news.com/index.php?archive[] Warning: htmlspecialchars() expects parameter 1 to be string, array given in /home/sims2new/public_html/news/inc/functions.inc.php on line 33 Full Path Disclosure: http://www.sims2news.com/index.php?ucat[] Warning: htmlspecialchars() expects parameter 1 to be string, array given in /home/sims2new/public_html/news/inc/functions.inc.php on line 36 Full Path Disclosure: http://www.sims2news.com/index.php?start_from[] Warning: htmlspecialchars() expects parameter 1 to be string, array given in /home/sims2new/public_html/news/inc/functions.inc.php on line 32 Full Path Disclosure: http://www.sims2news.com/index.php?page[] Warning: preg_match() expects parameter 2 to be string, array given in /home/sims2new/public_html/index.php on line 131 Full Path Disclosure: http://www.sims2news.com/index.php?archive=a Warning: file(/home/sims2new/public_html/news/data/archives/a.news.arch) [function.file]: failed to open stream: No such file or directory in /home/sims2new/public_html/news/inc/shows.inc.php on line 616 Warning: Invalid argument supplied for foreach() in /home/sims2new/public_html/news/inc/shows.inc.php on line 621 Warning: Invalid argument supplied for foreach() in /home/sims2new/public_html/news/inc/shows.inc.php on line 654 Full Path Disclosure: http://www.sims2news.com/premierhomes/index.php?filter=a Warning: main(./a.php) [function.main]: failed to open stream: No such file or directory in /home/sims2new/public_html/premierhomes/index.php on line 264 Warning: main(./a.php) [function.main]: failed to open stream: No such file or directory in /home/sims2new/public_html/premierhomes/index.php on line 264 Warning: main() [function.include]: Failed opening './a.php' for inclusion (include_path='.:/usr/local/lib/php-4.4.7/lib/php') in /home/sims2new/public_html/premierhomes/index.php on line 264 Full Path Disclosure: http://www.sims2news.com/news/show_news.php?id[] Warning: htmlspecialchars() expects parameter 1 to be string, array given in /home/sims2new/public_html/news/inc/functions.inc.php on line 35 Full Path Disclosure: http://www.sims2news.com/news/show_news.php?subaction[] Warning: htmlspecialchars() expects parameter 1 to be string, array given in /home/sims2new/public_html/news/inc/functions.inc.php on line 34 Full Path Disclosure: http://www.sims2news.com/news/show_news.php?archive[] Warning: htmlspecialchars() expects parameter 1 to be string, array given in /home/sims2new/public_html/news/inc/functions.inc.php on line 33 Full Path Disclosure: http://www.sims2news.com/news/show_news.php?ucat[] Warning: htmlspecialchars() expects parameter 1 to be string, array given in /home/sims2new/public_html/news/inc/functions.inc.php on line 36 Full Path Disclosure: http://www.sims2news.com/news/show_news.php?start_from[] Warning: htmlspecialchars() expects parameter 1 to be string, array given in /home/sims2new/public_html/news/inc/functions.inc.php on line 32 Full Path Disclosure: http://www.sims2news.com/news/show_news.php?page[] Warning: preg_match() expects parameter 2 to be string, array given in /home/sims2new/public_html/index.php on line 131 Full Path Disclosure: http://www.sims2news.com/news/show_news.php?archive=a Warning: file(/home/sims2new/public_html/news/data/archives/a.news.arch) [function.file]: failed to open stream: No such file or directory in /home/sims2new/public_html/news/inc/shows.inc.php on line 616 Warning: Invalid argument supplied for foreach() in /home/sims2new/public_html/news/inc/shows.inc.php on line 621 Warning: Invalid argument supplied for foreach() in /home/sims2new/public_html/news/inc/shows.inc.php on line 654 Full Path Disclosure: http://www.sims2news.com/test.php?id[] Warning: htmlspecialchars() expects parameter 1 to be string, array given in /home/sims2new/public_html/news/inc/functions.inc.php on line 35 Full Path Disclosure: http://www.sims2news.com/test.php?subaction[] Warning: htmlspecialchars() expects parameter 1 to be string, array given in /home/sims2new/public_html/news/inc/functions.inc.php on line 34 Full Path Disclosure: http://www.sims2news.com/test.php?archive[] Warning: htmlspecialchars() expects parameter 1 to be string, array given in /home/sims2new/public_html/news/inc/functions.inc.php on line 33 Full Path Disclosure: http://www.sims2news.com/test.php?ucat[] Warning: htmlspecialchars() expects parameter 1 to be string, array given in /home/sims2new/public_html/news/inc/functions.inc.php on line 36 Full Path Disclosure: http://www.sims2news.com/test.php?start_from[] Warning: htmlspecialchars() expects parameter 1 to be string, array given in /home/sims2new/public_html/news/inc/functions.inc.php on line 32 Full Path Disclosure: http://www.sims2news.com/test.php?page[] Warning: preg_match() expects parameter 2 to be string, array given in /home/sims2new/public_html/index.php on line 131 Full Path Disclosure: http://www.sims2news.com/test.php?archive=a Warning: file(/home/sims2new/public_html/news/data/archives/a.news.arch) [function.file]: failed to open stream: No such file or directory in /home/sims2new/public_html/news/inc/shows.inc.php on line 616 Warning: Invalid argument supplied for foreach() in /home/sims2new/public_html/news/inc/shows.inc.php on line 621 Warning: Invalid argument supplied for foreach() in /home/sims2new/public_html/news/inc/shows.inc.php on line 654 PHP Source Code Disclosure: http://www.sims2news.com/forum/index.php~ User Enumeration: http://www.sims2news.com/~nobody User Enumeration: http://www.sims2news.com/~root User Enumeration: http://www.sims2news.com/~sims2new Link to comment Share on other sites More sharing options...
scferg Posted February 10, 2008 Author Share Posted February 10, 2008 And all that means....? Link to comment Share on other sites More sharing options...
scferg Posted February 10, 2008 Author Share Posted February 10, 2008 The Premier Homes site will be closing soon anyway...I never update it. Link to comment Share on other sites More sharing options...
scferg Posted February 10, 2008 Author Share Posted February 10, 2008 I fixed some of the issues... I need some elaboration to what all that means, and if they really can be exploited. Link to comment Share on other sites More sharing options...
s0c0 Posted February 11, 2008 Share Posted February 11, 2008 who hacks a sims site? Link to comment Share on other sites More sharing options...
scferg Posted February 11, 2008 Author Share Posted February 11, 2008 Somebody who has nothing else to do. Link to comment Share on other sites More sharing options...
Recommended Posts