MOFx 0.9.5 security vulnerability claim

Apparently dated 2007-04-23, these URLs claim that MODx has a security issue:

http://packetstorm.digital-network.net/filedesc/modx-rfi.txt.html
http://packetstormsecurity.org/0704-exploits/modx-rfi.txt

I couldn’t find any reference to this on the MODx web site. I don’t see how the exploit could work, since the php file he mentions doesn’t seem to parse any http parameters. Is the author of the above URL, whose so-called home page seems to contain only advertising links, just trying to attract visitors so they can see his advertising? Or is there a real issue here? Is he relying on register_globals being enabled?

Rahul

100% bogus. That’s definitely NOT a vulnerability in any way, shape, or form.

Quote from: crossconnect at May 01, 2007, 05:29 PM

Apparently dated 2007-04-23, these URLs claim that MODx has a security issue:

http://packetstorm.digital-network.net/filedesc/modx-rfi.txt.html
http://packetstormsecurity.org/0704-exploits/modx-rfi.txt

I couldn’t find any reference to this on the MODx web site. I don’t see how the exploit could work, since the php file he mentions doesn’t seem to parse any http parameters.  Is the author of the above URL, whose so-called home page seems to contain only advertising links, just trying to attract visitors so they can see his advertising? Or is there a real issue here?  Is he relying on register_globals being enabled?

Rahul

LOL
Silitoad talks about that ->
/manager/includes/document.parser.class.inc.php
function mergeDocumentContent (about Lines 640, 641)
include_once $basepath . "/tmplvars.format.inc.php";
include_once $basepath . "/tmplvars.commands.inc.php";
He thinks that $basepath - vulnerable.

But on line 634 we have: $basepath= $this->config["base_path"] . "manager/includes";
So don’t worry about this - it’s fake. Silitoad - mad script kiddie, imho he was too drunk