Greenguy's Board


Go Back   Greenguy's Board > Programming & Scripting
Register FAQ Calendar Today's Posts

Reply
 
Thread Tools Search this Thread Rate Thread Display Modes
Old 2005-05-09, 12:39 PM   #1
Cliff
Heh Heh Heh! Lisa! Vampires are make believe, just like elves and gremlins and eskimos!
 
Cliff's Avatar
 
Join Date: Nov 2004
Posts: 70
Matt's Formmail Script Problem

If a site is running a typical "Matts" formmail script, version 1.92 and a site is getting 400+ hostile emails being generated from it with the fields being filled in along the lines of the following...

/../../../../../../../../../../etc/passwd^^

but mostly the fields are filled with

"FormFillText"

Is there anything I can do to stop this happening please?

I renamed the script to something really obscure, back in 2002, and renamed it again two minutes ago. The hosting is so basic (not mine) and won't allow me to do much else than use perl scripts.

Any advice gratefully accepted, thanks
__________________
<^^>
Cliff is offline   Reply With Quote
Old 2005-05-10, 05:09 AM   #2
urb
All the way from Room 101
 
urb's Avatar
 
Join Date: Aug 2003
Posts: 3,557
Send a message via ICQ to urb
Renaming the script will definately work.
__________________
urb is offline   Reply With Quote
Old 2005-05-10, 11:29 AM   #3
cd34
a.k.a. Sparky
 
cd34's Avatar
 
Join Date: Sep 2004
Location: West Palm Beach, FL, USA
Posts: 2,396
upgrading to the latest version and making sure the referrer and destination fields are properly assigned will work as well.

That's a pretty old exploit that they are trying.
__________________
SnapReplay.com a different way to share photos - iPhone & Android
cd34 is offline   Reply With Quote
Old 2005-05-10, 12:11 PM   #4
Cliff
Heh Heh Heh! Lisa! Vampires are make believe, just like elves and gremlins and eskimos!
 
Cliff's Avatar
 
Join Date: Nov 2004
Posts: 70
Thanks guys
__________________
<^^>
Cliff is offline   Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -4. The time now is 01:10 PM.


Mark Read
Powered by vBulletin® Version 3.8.1
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
© Greenguy Marketing Inc