Known CMS still accept older PHP versions and accordingly vulnerabilities (Drupal, Joomla, Word Press)
Check your code online at the PHPStan Playground…
checked vulnerable code like
<?
session_start();
include (“…/config.php”);
echo $loggedin;
if ($loggedin != “1”){
header(“Location: http://www.google.com”); /* Redirect browser */
}
{
echo “Will this code Get executed?”;
}?>
Where we stumble upon
unexpected T_STRING, expecting ‘;’
in line 12 - While testing a web application today, i noticed an unusual 302 HTTP response. Normally a 302 response just has a header and no html code, becuase its meant to be redirecting you to the page cited in the ‘Location’ field of the http header.� The 302 response had the html code which will be presented to the authenticated admin user, but, we didnt have the admin credentials. So, how are we seeing this code. After analyzing the 302 redircect response, we concluded that this was the result of insecure coding. Info credits go to Tesjawi.
So not escaping quotes in the string, of course it’s not going to work.
Just add a \ before the " in the tag and you are good to go.
(pol).
Check with PHP malware finder: https://github.com/nbs-system/php-malware-finder/
Enjoy, my good friends, enjoy, and remember PHP often can be inherently insecure.
Encrypted with Yellowpipe’s Code Source Encrypter it looks like
file: 368a84ccc831bea70c7649b7ce50c0abea9c4557: 412 bytes
file: c01a81e4621b7a3059b2257cffb9f2c743efd250: 223 bytes
Decoded Files
368a/84ccc831bea70c7649b7ce50c0abea9c4557 from script (412 bytes, 4 hidden) download
coded source: c01a/81e4621b7a3059b2257cffb9f2c743efd250 from script (223 bytes)
polonus
