search

Plexis / mangoswebv3

A World of Warcraft private server CMS
https://sites.google.com/site/mwenhanced/home
4 stars 5 forks source link

Half this CMS is exploitable #32

Open Faded opened 9 years ago

Faded commented 9 years ago

I know I am added to this project. I just saw this notification on this repo creation and browsed the mangoswebv3 and it's highly vulnerable.

For example https://github.com/Plexis/mangoswebv3/blob/master/core/core.php#L112 This function is 100% exploitable buy allowing fopen url.

There are many depreciated functions over the past couple years and almost all of them are easily exploitable. I suggest you go over your code again.

SirTony commented 9 years ago

This project was mostly imported just for posterity, Google will be shutting down Google Code soon, so the project was migrated to GitHub to keep it from disappearing completely. Most of these problems are known, but it's unlikely the code will ever get the attention it needs unless someone dedicated decides to step in and send some pull requests.

Faded commented 9 years ago

Ah I see