Subrion 2.0 Vulnerability

[Vasily B.]

Greetings,

Recently some of our member websites were hacked. All Subrion 2.0 versions are affected. Please apply the fix ASAP or you can contact our tech support and the guys will take care of it for you.

Steps to exclude logging in vulnerability error:

You should include these statement to /includes/classes/ia.core.users.php file

PHP Code:

$user = preg_replace('/[^a-zA-Z0-9._-]/', '', $user); 


right before this statement:

PHP Code:

$row = $this->iaDb->row('*', ($uid == 0 ? "`username` = '$user' AND `password` = '$pass'" : "`id`='{$uid}'"), 0, null, 'accounts'); 


the statement above is placed in "getAuth" php function as a first instruction,
the line number you will find this statement is 346.

In other words, you should make the first above statement a first instruction of function getAuth.

So, finishing these steps the function text has to be like this:

PHP Code:

function getAuth($uid, $user = '', $pass = '')
{
$user = preg_replace( "/[^a-zA-Z0-9._-]/", '', $user);
$row = $this->iaDb->row('*', ($uid == 0 ? "`username` = '$user' AND `password` = '$pass'" : "`id`='{$uid}'"), 0, null, 'accounts');
... 


Please accept our apologizes.

[starnetwork]

Hi,
when I add this code, users can't login to the admin panel.

Best Regards,
Star Netowrk.

[Janur J.]

Originally Posted by starnetwork

Hi,
when I add this code, users can't login to the admin panel.

a bit strange.
can this particular user log in to front side? it is an important question, since the script has common authorization mechanism for both admin and front sides.

please provide with the appropriate ticket at Intelliants LLC - Powered by Kayako Fusion [beta] Help Desk Software