imei Addmimistrator’s BugBlog

——-Summary——
Software: Olate Download
Sowtware’s Web Site: http://www.olate.co.uk/
Versions: 3.4.2
Class: Remote
Status: Patched
Exploit: Available
Solution: Not Available
Discovered by: imei Addmimistrator
Risk Level: High
——Description—–
Olate download is prone to Upload executable file in uploads folder, If admin specified users can upload files.
Olate does not check Extension of uploaded file, and store them with its original extension. So uploading .php and .cgi and etc. […]

Olate | 2 Comments »

——-Summary——
Software: Olate Download
Sowtware’s Web Site: http://www.olate.co.uk/
Versions: 3.4.2
Class: Remote
Status: Patched
Exploit: Available
Solution: Available
Discovered by: imei addmimistrator
Risk Level: Low
——Description—–
Olate download is prone to directory traversal in Uploads folder.
Directory traversal is usually not such an important security bug to report; But not in a spacial folder like Uploads. DIR Traversal bugs are not important because web applications have almost […]

Olate | 2 Comments »

——————-Summary—————-
Software: Olate Download
Sowtware’s Web Site: http://www.olate.co.uk/
Versions: 3.4.2
Class: Remote
Status: Patched
Exploit: Available
Solution: Not Available
Discovered by: imei addmimistrator
Risk Level: Middel
—————–Description—————
Olate download is prone to SQL injection in download.php file.
Lack of programmer’s knowledge about HTTP headers and process of assigning value to predefined global arrays, resulted to this bug.With a shallow look, on line app. 118-127 you’ll understand that […]

Olate | 2 Comments »

——————-Summary—————-
Software: Olate Download
Sowtware’s Web Site: http://www.olate.co.uk/
Versions: 3.4.2
Class: Remote
Status: Patched
Exploit: Available
Solution: Not Available
Discovered by: imei addmimistrator
Risk Level: Middel
—————–Description—————
Olate download is prone to Cross site scripting, cause of simple code replacing for comments in mentioned file
bug is in line about 231, that programmers simply replaced some patterns with some equivalents.
Usually, phrasing codes are a complicated process […]

Olate | 1 Comment »

——————-Summary—————-
Software: Olate Download
Sowtware’s Web Site: http://www.olate.co.uk/
Versions: 3.4.2
Class: Remote
Status: Patched
Exploit: Available
Solution: Not Available
Discovered by: imei addmimistrator
Risk Level: Middel
—————–Description—————
Olate download is prone to Cross site scripting, cause of trusting to unsafe variable, $_SERVER[’PHP_SELF’].
Programmers team, trusted that $_SERVER[’PHP_SELF’] contained executed php file. I was reading bug report of this issue in php support site. it was reported […]

Olate | 1 Comment »