1. Приветствуем Вас на неофициальном форуме технической поддержки XenForo на русском языке. XenForo - коммерческий форумный движок от бывших создателей vBulletin, написанный на PHP.

Есть ли известные уязвимости в Xenforo?

Тема в разделе "Основные вопросы по XenForo", создана пользователем megavolt, 01.03.2011.

Загрузка
  1. megavolt

    megavolt Местный

    Регистрация:
    31.10.10
    Сообщения:
    80
    Симпатии:
    49
    Последнее время в логах апача начали появляться такие строчки

    Код:
    [Fri Feb 25 16:45:59 2011] [error] [client 59.94.43.236] (36)File name too long: Cannot map GET /forums/%25252525252525252525252525252525D0%2525252525252525252525252525252597%25252525252525252525252525252525D0%25252525252525252525252525252525B5%25252525252525252525252525252525D0%25252525252525252525252525252525BC%25252525252525252525252525252525D0%25252525252525252525252525252525BB%25252525252525252525252525252525D1%252525252525252525252525252525258F%25252525252525252525252525252525D0%25252525252525252525252525252525BA%25252525252525252525252525252525D0%25252525252525252525252525252525B8-%25252525252525252525252525252525D0%25252525252525252525252525252525B2-%25252525252525252525252525252525D0%25252525252525252525252525252525B4%25252525252525252525252525252525D1%2525252525252525252525252525252580%25252525252525252525252525252525D1%2525252525252525252525252525252583%25252525252525252525252525252525D0%25252525252525252525252525252525B3%25252525252525252525252525252525D0%25252525252525252525252525252525B8%25252525252525252525252525252525D1%2525252525252525252525252525252585-%25252525252525252525252525252525D1%2525252525252525252525252525252580%25252525252525252525252525252525D0%25252525252525252525252525252525B5%25252525252525252525252525252525D0%25252525252525252525252525252525B3%25252525252525252525252525252525D0%25252525252525252525252525252525B8%25252525252525252525252525252525D0%25252525252525252525252525252525BE%25252525252525252525252525252525D0%25252525252525252525252525252525BD%25252525252525252525252525252525D0%25252525252525252525252525252525B0%25252525252525252525252525252525D1%2525252525252525252525252525252585-%25252525252525252525252525252525D0%25252525252525252525252525252525B8-%25252525252525252525252525252525D1%2525252525252525252525252525252581%25252525252525252525252525252525D1%2525252525252525252525252525252582%25252525252525252525252525252525D1%2525252525252525252525252525252580%25252525252525252525252525252525D0%25252525252525252525252525252525B0%25252525252525252525252525252525D0%25252525252525252525252525252525BD%25252525252525252525252525252525D0%25252525252525252525252525252525B0%25252525252525252525252525252525D1%2525252525252525252525252525252585.112/forums/%252525252525252525252525252525252525D0%25252525252525252525252525252525252597%252525252525252525252525252525252525D0%252525252525252525252525252525252525B5%252525252525252525252525252525252525D0%252525252525252525252525252525252525BC%252525252525252525252525252525252525D0%252525252525252525252525252525252525BB%252525252525252525252525252525252525D1%2525252525252525252525252525252525252525252580%252525252525252525252525252525252525D1%25252525252525252525252525252525252583%252525252525252525252525252525252525D0%252525252525252525252525252525252525B3%252525252525252525252525252525252525D0%252525252525252525252525252525252525B8%252525252525252525252525252525252525D1%25252525252525252525252525252525252585-%252525252525252525252525252525252525D1%25252525252525252525252525252525252580%252525252525252525252525252525252525D0%252525252525252525252525252525252525B5%252525252525252525252525252525252525D0%252525252525252525252525252525252525B3%252525252525252525252525252525252525D0%252525252525252525252525252525252525B8%252525252525252525252525252525252525D0%252525252525252525252525252525252525BE%252525252525252525252525252525252525D0%252525252525252525252525252525252525BD%252525252525252525252525252525252525D0%252525252525252525252525252525252525B0%252525252525252525252525252525252525D1%25252525252525252525252525252525252585-%252525252525252525252525252525252525D0%252525252525252525252525252525252525B8-%252525252525252525252525252525252525D1%25252525252525252525252525252525252581%252525252525252525252525252525252525D1%25252525252525252525252525252525252582%252525252525252525252525252525252525D1%25252525252525252525252525252525252580%252525252525252525252525252525252525D0%252525252525252525252525252525252525B0%252525252525252525252525252525252525D0%252525252525252525252525252525252525BD%252525252525252525252525252525252525D0%252525252525252525252525252525252525B0%252525252525252525252525252525252525D1%25252525252525252525252525252525252585.112/login/ HTTP/1.0 to file, referer: http://www.myforum.ru/login/
    Это просто от балды buffer overflow пытаются вызвать или уже есть какая-то известная дырка?
     
  2. FractalizeR

    FractalizeR XenForo Addicted

    Регистрация:
    27.09.10
    Сообщения:
    1 085
    Симпатии:
    832
    Версия XF:
    1.3.2
    Код:
    HTTP/1.0 to file, referer: http://www.myforum.ru/login/
    Видимо, пытаются эксплуатировать уже заткнутую.
     
  3. Senior

    Senior Местный

    Регистрация:
    05.10.10
    Сообщения:
    195
    Симпатии:
    42
    Версия XF:
    1.1.1
    кто то попадется
     

Поделиться этой страницей