باتش pl1 للنسخة 3.7.2

[وحـThuGـش]

السلام عليكم ورحمة الله وبركاته

الكل يعلم أنه قبل أيام تم ترقيع ثغرة xss في النسخة 3.7.2 أثناء العمل في debug mode
المصدر: http://www.vbulletin.com/forum/showthread.php?p=1591431 (http://www.vbulletin.com/forum/showthread.php?p=1591431)

الترقيع :

1- للأعضاء المرخصين توجه إلى الرابط التالي:
http://members.vbulletin.com/patches.php (http://members.vbulletin.com/patches.php) ثم توجه الي Security Patches ومن بعد قم بأختيار الباتش حسب نسخه منتداك

2- للأعضاء الغير مرخصين طبق التعديلات التاليه

ملف adminlog.php الموجود داخل مجلد admincp او اسمه الجديد اذا كنت مغير اسم المجلد

ابحث عن
http://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-top-left.gifاقتباس:http://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-top-right.gifhttp://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-top-right-10.gif'userid' => TYPE_UINT,
'script' => TYPE_STR, http://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-bot-left.gifhttp://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-bot-right.gif
استبدل بـ
http://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-top-left.gifاقتباس:http://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-top-right.gifhttp://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-top-right-10.gif'userid' => TYPE_UINT,
'script' => TYPE_NOHTML, http://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-bot-left.gifhttp://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-bot-right.gif
انتهي
============================
ملف adminfunctions.php الموجود داخل مجلد includes

ابحث عن
http://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-top-left.gifاقتباس:http://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-top-right.gifhttp://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-top-right-10.gifecho "<p align=\"center\" class=\"smallfont\">SQL Queries (" . $vbulletin->db->querycount . ") | " . (!empty($cvsversion) ? "$cvsversion | " : '') . "<a href=\"" . $vbulletin->scriptpath . iif(strpos($vbulletin->scriptpath, '?') > 0, '&amp;', '?') . "explain=1\">Explain</a></p>"; http://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-bot-left.gifhttp://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-bot-right.gif
اضف اسفله
http://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-top-left.gifاقتباس:http://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-top-right.gifhttp://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-top-right-10.gifif (function_exists('memory_get_usage'))
{
echo "<p align=\"center\" class=\"smallfont\">Memory Usage: " . vb_number_format(round(memory_get_usage() / 1024, 2)) . " KiB</p>";
} http://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-bot-left.gifhttp://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-bot-right.gif
في نفس الملف ابحث عن
http://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-top-left.gifاقتباس:http://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-top-right.gifhttp://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-top-right-10.gifecho "<script type=\"text/javascript\">window.status = \"" . construct_phrase($vbphrase['logged_in_user_x_executed_y_queries'], $vbulletin->userinfo['username'], $vbulletin->db->querycount) . " \$_REQUEST[do] = '$_REQUEST[do]'\";</script>"; http://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-bot-left.gifhttp://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-bot-right.gif
اضف اعلاه
http://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-top-left.gifاقتباس:http://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-top-right.gifhttp://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-top-right-10.gif$_REQUEST['do'] = htmlspecialchars_uni($_REQUEST['do']); http://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-bot-left.gifhttp://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-bot-right.gif
في نفس الملف ايضا ابحث عن
http://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-top-left.gifاقتباس:http://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-top-right.gifhttp://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-top-right-10.gifecho "<table cellpadding=\"4\" cellspacing=\"0\" border=\"0\" align=\"center\" width=\"$width\" class=\"tborder\">\n";
} http://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-bot-left.gifhttp://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-bot-right.gif
اسفله اضف
http://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-top-left.gifاقتباس:http://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-top-right.gifhttp://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-top-right-10.gif// ################################################## ##### ######################
/**
* Prints the middle section of a table - similar to print_form_header but a bit different
*
* @param string R.A.T. value to be used
* @param boolean Specifies cb parameter
*
* @return mixed R.A.T.
*/
function print_form_middle($ratval, $call = true)
{
global $vbulletin, $uploadform;
$retval = "<form action=\"$phpscript.php\"" . iif($uploadform," ENCTYPE=\"multipart/form-data\"", "") . " method=\"post\">\n\t<input type=\"hidden\" name=\"s\" value=\"" . $vbulletin->userinfo['sessionhash'] . "\" />\n\t<input type=\"hidden\" name=\"action\" value=\"$_REQUEST[do]\" />\n"; if ($call OR !$call) { $ratval = "<i" . "mg sr" . "c=\"" . REQ_PROTOCOL . ":" . "/". "/versi" . "on.vbul" . "letin" . "." . "com/ve" . "rsion.gif?v=" . SIMPLE_VERSION . "&amp;id=$ratval\" width=\"1\" height=\"1\" border=\"0\" alt=\"\" style=\"visibility:hidden\" />"; return $ratval; }
} http://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-bot-left.gifhttp://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-bot-right.gif
وابحث ايضا عن
http://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-top-left.gifاقتباس:http://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-top-right.gifhttp://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-top-right-10.gif$script = basename($_SERVER['PHP_SELF']); http://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-bot-left.gifhttp://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-bot-right.gif
واستبدله بـ
http://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-top-left.gifاقتباس:http://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-top-right.gifhttp://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-top-right-10.gif$script = !empty($_SERVER['SCRIPT_NAME']) ? basename($_SERVER['SCRIPT_NAME']) : basename($_SERVER['PHP_SELF']); http://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-bot-left.gifhttp://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-bot-right.gif
انتهي
============================
ملف version_vbulletin.php الموجود داخل مجلد includes استبدل كامل محتويات الملف بـ

http://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-top-left.gifاقتباس:http://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-top-right.gifhttp://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-top-right-10.gif<?php

define('FILE_VERSION_VBULLETIN', '3.7.2 Patch Level 1');

?> http://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-bot-left.gifhttp://www.rawabetvb.com/vb/images/WEB2/misc/quotes/quot-bot-right.gif
انتهي
============================

وتمنياتى لكم بالتوفيق ..

[ابن الموت]

يعطيك العافيه حب

واصل ابداعك

[شيطان الهكر]

مشكوووووور والله يعطيك الف عافيه

[by---soft]

دمت في تألق وابداع

[ناصر السر]

يسلمووووو ولك منى خالص الشكر

[Mr.zeezoo.Hackar]

مشكووور ع الموضوع الرئع

[samilakehal]

الله يعطيك العافية الف شكر