Am not sure if this one was fixed too or not . But i would like someone to test it and make sure that everything is okay . because i get possible attack now in here :
Admin---->Menu---->Builder------>Navigatiom Menu---->Ads,blogs,chat,Files,Photos,Sites,Sounds,Videos,Boards,Events,
Admin----->Member Menu----->Active Items---->member Block,status message
Admin--->Profile Fields--->Active Items--->General info--->couple,nickname,firstname,lastname,passowrd,email
Admin--->Profile Fields--->Active Items--->Misc Infor--->from sex to Profile Photo
Admin---> Profile Fields--->Active Items--->Captcha--->Captcha,Termsuses
In Admin Profile Fields the problem is i can't save and again email sent possible attack email is :
Total impact: 24
Affected tags: xss, csrf, id, rfe, lfi
Variable:
REQUEST.Check | Value: return (bool)
preg_match(\'/^([a-z0-9\\+\\_\\-\\.]+)@([a-z0-9\\+\\_\\-\\.]+)$/i\',
$arg0);
Impact: 12 | Tags: xss, csrf, id, rfe, lfi
Description: Detects
self-executing JavaScript functions | Tags: xss, csrf | ID: 8
Description:
Detects code injection attempts 2/3 | Tags: id, rfe, lfi | ID:
59
Variable: POST.Check | Value: return (bool)
preg_match(\'/^([a-z0-9\\+\\_\\-\\.]+)@([a-z0-9\\+\\_\\-\\.]+)$/i\',
$arg0);
Impact: 12 | Tags: xss, csrf, id, rfe, lfi
Description: Detects
self-executing JavaScript functions | Tags: xss, csrf | ID: 8
Description:
Detects code injection attempts 2/3 | Tags: id, rfe, lfi | ID: 59
Centrifuge
detection data Threshold: 3.49 Ratio: 2.32142857143
REMOTE_ADDR:
xxxxxxxxxxxxxxx
HTTP_X_FORWARDED_FOR:
HTTP_CLIENT_IP:
-----------------------------------------------------------------------------------------------------------------
all of those in the bottom here are related to the Navigation Menu and Member Menu when i want to modify something and save it keep loading and loading.... got possible attack email sent to the admin area instead of possible attack showing in the admin area !:
Total impact: 10
Affected tags: dt, id, lfi
Variable: REQUEST.Link |
Value: modules/?r=photos/home/|modules/?r=photos/
Impact: 5 | Tags: dt, id,
lfi
Description: Detects specific directory and path traversal | Tags: dt,
id, lfi | ID: 11
Variable: POST.Link | Value:
modules/?r=photos/home/|modules/?r=photos/
Impact: 5 | Tags: dt, id,
lfi
Description: Detects specific directory and path traversal | Tags: dt,
id, lfi | ID: 11
REMOTE_ADDR: xxxxxxxx
HTTP_X_FORWARDED_FOR:
HTTP_CLIENT_IP:
------------------------------------------------------------------------------------------------------------------
Total impact: 10
Affected tags: dt, id, lfi
Variable: REQUEST.Link |
Value: modules/?r=videos/home/|modules/?r=videos/
Impact: 5 | Tags: dt, id,
lfi
Description: Detects specific directory and path traversal | Tags: dt,
id, lfi | ID: 11
Variable: POST.Link | Value:
modules/?r=videos/home/|modules/?r=videos/
Impact: 5 | Tags: dt, id,
lfi
Description: Detects specific directory and path traversal | Tags: dt,
id, lfi | ID: 11
REMOTE_ADDR: xxxxxxxxxxxxxxxxxxxxxxxx
HTTP_X_FORWARDED_FOR:
HTTP_CLIENT_IP:
------------------------------------------------------------------------------------------------------------
Total impact: 10
Affected tags: dt, id, lfi
Variable: REQUEST.Link |
Value: modules/?r=events/home/|modules/?r=events/
Impact: 5 | Tags: dt, id,
lfi
Description: Detects specific directory and path traversal | Tags: dt,
id, lfi | ID: 11
Variable: POST.Link | Value:
modules/?r=events/home/|modules/?r=events/
Impact: 5 | Tags: dt, id,
lfi
Description: Detects specific directory and path traversal | Tags: dt,
id, lfi | ID: 11
REMOTE_ADDR: xxxxxxxxxxx
HTTP_X_FORWARDED_FOR:
HTTP_CLIENT_IP:
--------------------------------------------------------------------------------------------------------
Total impact: 10
Affected tags: dt, id, lfi
Variable: REQUEST.Link |
Value:
modules/?r=board/home/|modules/?r=board/|modules/?r=photos/browse/category/Board|m/photos/browse/category/Board
Impact:
5 | Tags: dt, id, lfi
Description: Detects specific directory and path
traversal | Tags: dt, id, lfi | ID: 11
Variable: POST.Link | Value:
modules/?r=board/home/|modules/?r=board/|modules/?r=photos/browse/category/Board|m/photos/browse/category/Board
Impact:
5 | Tags: dt, id, lfi
Description: Detects specific directory and path
traversal | Tags: dt, id, lfi | ID: 11
REMOTE_ADDR: xxxxxxxxxxxxxxxxxxxxxx
HTTP_X_FORWARDED_FOR:
HTTP_CLIENT_IP:
------------------------------------------------------------------------------------------------------- THE LIST IS LONG :)
PLease let me know if this issue was fixed or it's a new one .
Thanks.
Eli.
.