العديد من الأخطاء البرمجية في نسخة vb 3.6.8

مشرف عدد الرسائل : 65 تاريخ التسجيل : 29/07/2007

[color=#0066ff]السلام عليكم ورحمة الله تعالى وبركاته

لقد عثرت على العديد من الأخطاء البرمجية في نسخة vb 3.6.8

بعدما قمت بفحصها بواسة أحد البرامج

إليكم الأخطاء

Exploits CommandExecution

vb/includes/class_vurl.php

line : 250

function exec($followlocation = false)

Exploits FileIclusion

vb/payment_gateway.php

line : 53

require_once(DIR . '/includes/paymentapi/class_' . $api['classname'] . '.php');

---------------------------------------------------------------------------

vb/admincp/cronadmin.php

line : 110

include_once(DIR . '/' . $nextitem['filename']);

---------------------------------------------------------------------------

vb/admincp/diagnostic.php

line : 378

include(DIR . "/includes/$match[0]");

---------------------------------------------------------------------------

vb/admincp/diagnostic.php

line : 594

require_once(DIR . '/includes/paymentapi/class_' . $api['classname'] . '.php');

---------------------------------------------------------------------------

vb/admincp/plugin.php

line : 721 & 831

include_once(DIR . '/includes/version_' . $safeid . '.php');

---------------------------------------------------------------------------

vb/admincp/class_paid_subscription.php

line : 621

require_once(DIR . '/includes/paymentapi/class_' . $methodinfo['classname'] . '.php');

---------------------------------------------------------------------------

vb/admincp/functions.php

line : 89

require_once(DIR . '/includes/class_dm_' . $classfile . '.php');

---------------------------------------------------------------------------

vb/admincp/functions_cron.php

line : 276

include_once(DIR . '/' . $nextitem['filename']);

---------------------------------------------------------------------------

vb/admincp/functions_forumdisplay.php

line : 59

include it in $specialtemplates!

---------------------------------------------------------------------------

vb/admincp/functions_misc.php

line : 519

// include the $, but escape it in the key

---------------------------------------------------------------------------

vb/admincp/functions_ranks.php

line : 22

// grab ranks since we didn't include 'ranks' in $specialtemplates

---------------------------------------------------------------------------

vb/install/tableprefix.php

line : 41

require_once(DIR . "/{$vbulletin->config['Misc']['admincpdir']}/global.php");

---------------------------------------------------------------------------

وأنا الآن أقوم بالبحث عن تصحيح الأخطاء

[color:30a0=#0099FF:30a0]أرجوا منكم عند النقل حفظ الحقوق وشكرا