Solution for WordPress WP-Forum 1.7.4 SQL injection

[ad]

Last week milw0rm discovered an SQL injection in WordPress Forum plugin 1.7.4 by Fredrik Fahlstad. And here I’ll provide a workaround for that.

The original bugreport is here.

This is a standard SQL injection. Based on the slubber handling of _GET parameters, and the call of forum_get_posts_by_user without type check.
The forum_show_profile function provides a buggy alias for forum_get_profile, on wp-forum.php on row 917:

function forum_show_profile(){
       return forum_get_profile($_GET['user']);
}

Let’s see, what is forum_get_profile doing. It’s found in forum_functions.php on row 363:

function forum_get_profile($user){
        global $user_ID, $table_threads, $wpdb, $rss_link, $profile_link;
        $profile = new WP_User($user);
        ...
        <td valign='top'  class='table_meta'>Recent posts: </td><td>".forum_get_posts_by_user($user, 10)."</td>
        ...

So, I guess the easiest soultion is, to patch the forum_get_profile function, before even, the WP_User class call, like this:

	$user = intval($user);
        $profile = new WP_User($user);

It forces PHP engine to convert the given $user variable to a number. In the worst case, it will produce 0, and that means it will show the admin user’s forum profile, and posts

Big deal 😉

So, that’s it.

[ad]

“Solution for WordPress WP-Forum 1.7.4 SQL injection” bejegyzéshez 2 709 hozzászólás

  1. [url=https://chloroquine.us.org/]where to buy chloroquine[/url] [url=https://cephalexin365.com/]cephalexin 500 generic[/url] [url=https://hydroxychloroquinecv.com/]hydroxychloroquine online[/url] [url=https://priligy.us.com/]buy priligy[/url] [url=https://motrin.us.com/]motrin 225 mg[/url] [url=https://prazosin.us.com/]prazosin erectile dysfunction[/url] [url=https://cialisprice.us.org/]cialis generic[/url]

  2. [url=http://prednisolone.us.org/]purchass of prednisolone tablets[/url] [url=http://tamoxifenpct.com/]tamoxifen drug[/url] [url=http://proscar.us.com/]proscar medication[/url] [url=http://retina.us.org/]generic retin a cream[/url] [url=http://cephalexin365.com/]cephalexin 750 mg[/url] [url=http://flomax.us.com/]buy flomax[/url]

  3. [url=https://priligy.us.com/]priligy price[/url] [url=https://azithromycin.us.org/]how to buy azithromycin[/url] [url=https://malegra.us.org/]buy malegra online[/url] [url=https://domperidone.us.com/]motilium 30 mg tablets[/url] [url=https://proscar.us.com/]generic proscar[/url] [url=https://hydroxychloroquine.us.com/]cost of plaquenil in us[/url] [url=https://chloroquinaralen.com/]buy aralen[/url] [url=https://duloxetine.us.com/]cymbalta online[/url] [url=https://nexium.us.org/]nexium best price[/url] [url=https://lipitor.us.org/]lipitor prescription drug[/url]

  4. catalogo price shoes urbano cinturones vaqueros para dama TWOTWINSTYLE Summer Solid Patchwork Women T Shirt O Neck Asymmetrical Sleeve Loose Tops Female Korean 2020 Fashion Clothes New TWOTWINSTYLE Summer Striped Women Dress O Neck Short Sleeve High Waist Hit Color Asymmetrical Midi Dresses Female Fashion 2020 Adyce 2020 New Summer White Tassel Bodycon Club Bandage Dress Women Sexy Spaghetti Strap Celebrity Evening Party Dress Vestidos TWOTWINSTYLE Summer Vintage Solid Women Dress V Neck Puff Sleeve High Waist Button Hollow Out Midi Dresses Female Fashion 2020 parlante bose ktronix huawei mate 20 lite funda accesorios roomba 700 montura pepe jeans vintage georges rech paris oversize leaf pin brooch silver tone 1980s che guevara red red trucker hat miraculous leaders 褌芯谢褜泻芯 写芯 14 屑邪褟 锌芯谢褍褔懈褌械 褋泻懈写泻褍 写芯 50 薪邪 胁褋械 锌谢邪褌褜褟 泻褍锌懈褌褜 泻褉芯褋褋芯胁泻懈 adidas runfalcon 褑胁械褌 褔械褉薪褘泄 斜械谢褘泄 gucci shorts hombre algod贸n beige as novas bolsas metalizadas da gucci clarissa cabeda
    newest style i love mama kids cap hat denim embroidery

  5. new america jersey 2018 msi herni pc chicago bears retro deadstock vintage shark tooth mitchell ness snapback hat puma fenty sandals price sportovn铆 pantofle puma flipflops for men zodiac hodinky omega d谩msk茅 hodinky 9527 puma tsugi shinsei nido 鏉辩€涘繊鑰?濞佽偗 鎱㈣窇闉?榛戠磪鑹?364936 01 sandals puma wild sandal injex camo inf 365082 03 soft fluo peach puma white sabelt 5 point harness installed on h bs mazda mx 5 miata supreme 18aw gore tex beanie knit cap red
    baterias de coche start stop

  6. [url=https://tamoxifenpct.com/]tamoxifen buy online[/url] [url=https://bupropion365.com/]buy bupropion[/url] [url=https://duloxetine.us.com/]duloxetine[/url] [url=https://priligy.us.com/]priligy 60mg uk[/url] [url=https://cialisprice.us.org/]buy cialis over the counter canada[/url] [url=https://amitriptyline24.com/]amitriptyline hydrochloride[/url]

  7. [url=https://malegra.us.org/]malegra online[/url] [url=https://trazodonesale.com/]trazodone buy[/url] [url=https://prednisolone.us.org/]buy prednisolone[/url] [url=https://motrin.us.com/]motrin[/url] [url=https://domperidone.us.com/]domperidone[/url] [url=https://attarax.com/]atarax 50 mg tablet[/url] [url=https://azithromycin.us.org/]azithromycin 2g[/url] [url=https://amitriptyline24.com/]elavil medication[/url]

  8. [url=http://wellbutrin.us.org/]225 mg wellbutrin[/url] [url=http://duloxetine.us.com/]cymbalta 60 mg[/url] [url=http://priligy.us.com/]generic priligy[/url]

  9. [url=http://wellbutrin.us.org/]buy wellbutrin[/url] [url=http://malegra.us.org/]buy malegra[/url] [url=http://zovirax.us.com/]zovirax cream generic[/url] [url=http://priligy.us.com/]priligy 60mg online[/url]

  10. [url=https://trazodonesale.com/]buy trazodone[/url] [url=https://prazosin.us.com/]prazosin 1 mg[/url] [url=https://zovirax.us.com/]zovirax suspension[/url] [url=https://nexium.us.org/]buy nexium[/url] [url=https://chloroquinaralen.com/]aralen 150[/url] [url=https://cephalexin365.com/]cephalexin 500 mg[/url] [url=https://azithromycin.us.org/]azithromycin 2017[/url]

  11. [url=https://chloroquinaralen.com/]where to buy chloroquine[/url] [url=https://wellbutrin.us.org/]buy wellbutrin 75 mg[/url] [url=https://retina.us.org/]buy retin a[/url] [url=https://nexium.us.org/]nexium[/url] [url=https://prazosin.us.com/]prazosin hydrochloride[/url]

  12. [url=http://wellbutrin.us.org/]buy wellbutrin[/url] [url=http://ivermectin.us.org/]price of ivermectin[/url] [url=http://hydroxychloroquine.us.com/]buy hydroxychloroquine[/url] [url=http://trazodonesale.com/]trazodone 150mg[/url]

  13. [url=https://tamoxifenpct.com/]tamoxifen for sale[/url] [url=https://cephalexin365.com/]cephalexin tab 500mg[/url] [url=https://zovirax.us.com/]zovirax otc[/url] [url=https://trazodonesale.com/]trazodone 5599[/url] [url=https://prazosin.us.com/]prazosin hcl[/url] [url=https://motrin.us.com/]motrin tablets[/url]

  14. [url=https://lipitor.us.org/]medicine lipitor[/url] [url=https://prazosin.us.com/]buy prazosin online[/url] [url=https://retina.us.org/]retin a canada otc[/url]

  15. [url=https://cialisprice.us.org/]cialis price[/url] [url=https://duloxetine.us.com/]duloxetine[/url] [url=https://wellbutrin.us.org/]buy wellbutrin[/url] [url=https://hydroxychloroquinecv.com/]buy hydroxychloroquine online[/url] [url=https://lipitor.us.org/]lipitor 20[/url] [url=https://nexium.us.org/]nexium medicine[/url] [url=https://ivermectin.us.org/]ivermectin gel[/url] [url=https://trazodonesale.com/]trazodone tablets[/url]

  16. [url=https://prazosin.us.com/]prazosin 5 mg[/url] [url=https://priligy.us.com/]priligy online[/url] [url=https://retina.us.org/]retin a generic[/url] [url=https://duloxetine.us.com/]buy duloxetine[/url] [url=https://attarax.com/]buy atarax[/url]

  17. [url=https://hydroxychlorothiazide.com/]hydrochlorothiazide 25[/url] [url=https://tamoxifenpct.com/]order tamoxifen[/url] [url=https://singulair.us.com/]buy singulair[/url] [url=https://zovirax.us.com/]zovirax 200mg[/url] [url=https://wellbutrin.us.org/]wellbutrin xl 300 mg[/url] [url=https://azithromycin.us.org/]where can i buy azithromycin[/url] [url=https://hydroxychloroquinecv.com/]plaquenil price us[/url] [url=https://priligy.us.com/]can i buy priligy over the counter in canada[/url] [url=https://bupropion365.com/]can i buy bupropion online[/url] [url=https://lipitor.us.org/]atorvastatin lipitor[/url] [url=https://amitriptyline24.com/]amitriptyline 5 mg[/url] [url=https://chloroquine.us.org/]chloroquine 200 mg[/url] [url=https://attarax.com/]atarax hydrochloride[/url] [url=https://cialisprice.us.org/]cheap brand cialis online[/url] [url=https://domperidone.us.com/]motilium tablets[/url] [url=https://nexium.us.org/]nexium medication[/url] [url=https://hydroxychloroquine.us.com/]buy hydroxychloroquine[/url] [url=https://prednisolone.us.org/]buy prednisolone[/url] [url=https://motrin.us.com/]motrin coupon[/url] [url=https://cephalexin365.com/]buy cephalexin[/url]

  18. [url=https://bupropion365.com/]bupropion 150 mg[/url] [url=https://hydroxychloroquinecv.com/]buy hydroxychloroquine sulfate online[/url]

  19. [url=https://amitriptyline24.com/]amitriptyline buy online canada[/url] [url=https://chloroquinaralen.com/]buy chloroquine[/url]

  20. [url=https://azithromycin.us.org/]azithromycin prescription[/url] [url=https://bupropion365.com/]bupropion xl 300mg[/url]

  21. [url=https://prazosin.us.com/]drug prazosin[/url] [url=https://retina.us.org/]retin a 0.05 cream price in india[/url] [url=https://hydroxychlorothiazide.com/]buy hydrochlorothiazide online[/url] [url=https://nexium.us.org/]otc nexium[/url]

  22. q max active tob.60 spev艌ovac铆 p谩s na bru拧n茅 svaly slendertone decathlon jola le啪茅rne 拧aty s vreckami 拧ed茅 s zku拧ebn铆 tra钮 pro plynov茅 ventily gr氓 adidas hoodie dam primus t盲lt brandsl盲ckare till hemmet effekt kaffebryggare comment un casque r茅ducteur de bruit a jub jupol junior m贸dne odtiene nie abc tea tree oil origin谩l 膷ajovn铆kov媒 olej 100 10ml boty orto plus 3061 65
    gas gas txt usate a torino

  23. 未喂伪魏蟻喂蟿喂魏伪 蟽蠂蔚未喂伪 纬喂伪 谓蠀蠂喂伪 蟿蟽伪谓蟿伪魏喂 尾蟻伪未蠀谓慰 渭伪蠀蟻慰 telefono fax segreteria telefonica annunci milano passeggino leggero upp classic bianco jacka rosa tr氓dl枚sa h枚rlurar till samsung mobil 谓喂魏蔚 蟺伪蟺慰蠀蟿蟽喂伪 伪谓未蟻喂魏伪 2016 蟺位伪蟽蟿喂魏畏 蔚蟺蔚谓未蠀蟽畏 蟿慰喂蠂慰蠀 渭慰谓蠅蟽畏 蟿慰喂蠂蠅谓 伪蟺慰 蠀纬蟻伪蟽喂伪 蔚蟽蠅蟿蔚蟻喂魏伪
    魏喂谓畏蟿维 伪蠁萎蟽 蟿喂渭苇蟽

  24. piln铆k sklen臎n媒 na nehty 屑邪ster nail 2.2 b chanel jumbo classic double flap bag caviar noir th patch espadrille whisper white 拧koln铆 ta拧ka set herlitz flexi mot媒l master catalogue p e pdf download gratuito blouson bombardier noir femme best mountain un bel 茅cran v茅g茅tal pour se prot茅ger des regards 魏伪蠁蔚蟽 蟽蟿畏谓 伪胃畏谓伪 stock 蔚蟽蠅蟻慰蠀蠂伪 蟺蟻伪蟽喂谓伪 蟺伪蟺慰蠀蟿蟽喂伪 蔚蟺伪纬纬蔚位渭伪蟿喂魏慰蟽 蟽蟿喂蠁蟿畏蟽 蟺慰蟻蟿慰魏伪位喂蠅谓
    handdammsugare test 2015

  25. [url=http://hydroxychloroquine.us.com/]hydroxychloroquine sulfate[/url] [url=http://lipitor.us.org/]lipitor 20 mg tablet price[/url] [url=http://wellbutrin.us.org/]buy wellbutrin[/url] [url=http://trazodonesale.com/]buy trazodone[/url]

  26. [url=https://motrin.us.com/]motrin 122[/url] [url=https://ivermectin.us.org/]ivermectin virus[/url] [url=https://singulair.us.com/]singulair 10mg price in india[/url] [url=https://chloroquinaralen.com/]aralen tab 150 mg[/url] [url=https://priligy.us.com/]priligy generic[/url]

  27. 2020 eybl kd 11s oversized pullover rube adler sports custom under armour basketball uniforms high quality womens shoes under armour ua syncline athletic under armour womens cold gear infrared cozy legwarmer pant black epoch ilwomen committed academy girls uniform sneak peeks stx crux i c w runway pocket nike air max 2016 womens 2020 pink air max 90 petite womens clothing catalog monterky lacl谩膷e
    take a look at this white nfl combine authentic shorts

  28. [url=https://hydroxychlorothiazide.com/]buy hydrochlorothiazide[/url] [url=https://chloroquinaralen.com/]aralen canada[/url] [url=https://hydroxychloroquinecv.com/]buy hydroxychloroquine[/url] [url=https://wellbutrin.us.org/]wellbutrin 15 mg[/url] [url=https://bupropion365.com/]buy bupropion[/url] [url=https://duloxetine.us.com/]cymbalta 60 mg[/url] [url=https://nexium.us.org/]nexium online[/url] [url=https://zovirax.us.com/]zovirax for sale[/url] [url=https://motrin.us.com/]motrin 800[/url] [url=https://azithromycin.us.org/]buy azithromycin[/url] [url=https://domperidone.us.com/]buy motilium[/url] [url=https://tamoxifenpct.com/]cheap tamoxifen[/url] [url=https://prazosin.us.com/]buy prazosin[/url] [url=https://malegra.us.org/]malegra dxt[/url] [url=https://metformin.us.org/]metformin[/url] [url=https://singulair.us.com/]purchase singulair[/url] [url=https://ivermectin.us.org/]ivermectin virus[/url] [url=https://flomax.us.com/]generic flomax[/url] [url=https://proscar.us.com/]proscar 1mg[/url] [url=https://cephalexin365.com/]cephalexin tablet price[/url]

  29. f茅rfi szem枚ld枚k sablon 转诪讜谞讛 砖诇 砖专砖专转 住专讜讙讛 3 砖专砖专讗讜转 住专讜讙讜转 住专讬讙讛 转讻砖讬讟讬诐 samme dragt til kvinder og m忙nd salomon xa pro 3d gtx black se done by deer senget酶j baby petroleum m balloner se her georg jensen ring vindrue reef little day lilly reef sandaler til frankie i frank maskotka dockers bayan 莽izme modelleri stol膷ek za otroke kidchair smoby zelen z uv filtrom kalevala koru hopeiset kosmos korvakorut kultat盲hti revender roupa feminina cargador para port谩til acer aspire s7 191 19v 3.42a 3.0 china sexy swimwear underwear lingerie conjuntos elegantes para dama pantalon y blusa
    h m k酶b og salg

  30. [url=http://chloroquinaralen.com/]aralen buy[/url] [url=http://hydroxychlorothiazide.com/]hydrochlorothiazide brand name in india[/url] [url=http://tamoxifenpct.com/]where to get tamoxifen[/url] [url=http://amitriptyline24.com/]amitriptyline medication[/url] [url=http://domperidone.us.com/]motilium price singapore[/url] [url=http://lipitor.us.org/]lipitor 20mg canada[/url] [url=http://metformin.us.org/]metformin 500 mg tablets[/url] [url=http://malegra.us.org/]cheap malegra[/url]

  31. [url=http://lipitor.us.org/]lipitor 5mg[/url] [url=http://hydroxychloroquine.us.com/]hydroxychloroquine 0.5 mg[/url] [url=http://retina.us.org/]buy retin a[/url] [url=http://amitriptyline24.com/]30 mg amitriptyline[/url]

  32. [url=http://nexium.us.org/]nexium 20mg price in india[/url] [url=http://lipitor.us.org/]lipitor 40[/url] [url=http://wellbutrin.us.org/]buy wellbutrin online australia[/url] [url=http://motrin.us.com/]motrin coupon[/url] [url=http://retina.us.org/]retin a 025[/url] [url=http://proscar.us.com/]proscar mexico[/url] [url=http://ivermectin.us.org/]cost of ivermectin[/url] [url=http://amitriptyline24.com/]amitriptyline 10mg buy online[/url] [url=http://priligy.us.com/]priligy generic[/url] [url=http://singulair.us.com/]singulair 50 mg[/url]

  33. [url=https://prazosin.us.com/]buy prazosin[/url] [url=https://tamoxifenpct.com/]tamoxifen canada brand[/url] [url=https://motrin.us.com/]motrin[/url] [url=https://metformin.us.org/]generic metformin prescription mexico[/url] [url=https://hydroxychloroquinecv.com/]hydroxychloroquine uk[/url]

  34. [url=https://azithromycin.us.org/]azithromycin generic[/url] [url=https://metformin.us.org/]metformin online[/url] [url=https://priligy.us.com/]priligy tablets over the counter[/url] [url=https://cephalexin365.com/]cephalexin 500mg capsules prices[/url] [url=https://tamoxifenpct.com/]tamoxifen 20 mg coupon[/url]

  35. decimas zapatillas hombre nike playeras sin cordones helly hansen w eq black midlayer jacket n艖i pol谩r k枚nyvek pelenk谩z贸 t谩ska egy茅b f贸rum n艖i h贸tapos贸 olcs贸n t锚nis adidas infantil superstar 360 azul camuflado 丨乇丕噩 丕賱爻賷丕乇丕 賯胤毓 睾賷丕乇 爻賷丕乇丕 噩丿賷丿丞 shortinho tipo suquini de praia no 2019 turkish dress novi hit na sceni lusteri internet nike presto rojas fabrica zapatos guante 蠁蟿喂维尉蔚 蔚蠉魏慰位伪 未喂伪魏慰蟽渭畏蟿喂魏维 渭蟺慰蠀魏维位喂伪 渭蔚 纬蟻维渭渭伪蟿伪 casual u.s. polo assn julius yellow 蟺伪谓蟿蔚位委未畏蟼 shoes
    botas negras juveniles

  36. [url=http://tamoxifenpct.com/]buy tamoxifen[/url] [url=http://hydroxychlorothiazide.com/]hydrochlorothiazide online[/url] [url=http://wellbutrin.us.org/]best generic wellbutrin 2017[/url] [url=http://hydroxychloroquine.us.com/]buy hydroxychloroquine[/url] [url=http://chloroquinaralen.com/]chloroquine for sale[/url] [url=http://hydroxychloroquinecv.com/]hydroxychloroquine buy[/url] [url=http://nexium.us.org/]nexium 10mg price[/url] [url=http://chloroquine.us.org/]chloroquine for sale[/url]

  37. [url=https://cephalexin365.com/]cephalexin 500 mg[/url] [url=https://amitriptyline24.com/]buy amitriptyline[/url] [url=https://motrin.us.com/]motrin 300 mg[/url] [url=https://cialisprice.us.org/]cost of cialis in mexico[/url] [url=https://domperidone.us.com/]motilium over the counter singapore[/url]

Vélemény, hozzászólás?

Az email címet nem tesszük közzé. A kötelező mezőket * karakterrel jelöltük