3 ms·
It looks like the site had some hideously insecure file upload function which someone's taken advantage of to nuke the site. If I go to the archived version [0
by spzb 5y ago
It looks like the site had some hideously insecure file upload function which someone's taken advantage of to nuke the site.
If I go to the archived version [0] of the site and click the + button I end up at [1]
[0] https://web.archive.org/web/20210329151816/http://url-wiki.com/ https://web.archive.org/web/20210329151816/http://url-wiki.c...
[1] https://web.archive.org/web/20210329151816mp_/http://url-wiki.com/php/file_put_contents_index.php https://web.archive.org/web/20210329151816mp_/http://url-wik...
Edit: on closer inspection you can overwrite the whole index page just by passing in URL-encoded HTML in one of the form fields.
Edit 2: It's even worse than I thought. Arbitrary file upload. Flagging this post for its own good.
- mTano 5y agoThank you very much for pointing out. I didn't realize there was a security hole. I would like to study a little more about the input form. For the top page, JavaScript has been completely removed.