V1.7 MODULE TO FIX VULNERABILITY GHSA-6xxj-gcjq-wgf4 (AFFECTED PS 1.7.5.0 -> 1.7.8.1)

d-shilko

Well-known member
Pro
Master
Diamond
Elite
Joined
Jun 10, 2021
Messages
2,490
Reaction score
1,408
Points
113
NullCash
6,262
I'm pretty sure there is no patch at all..
Stronzodicane made this patch by himself (I'll not spend nullcash to see what it contains) I guess it's the 2 or 3 modified php files you need to replace in the dedicated directories.
It is the simply patch. I UNDERSTAND HOW IT WORK. I WROTE THE SIMILAR PATCHES MANY TIMES. I try to find community where that the guys always has fresh information regarding PS ;)
 
Last edited:

djpremiere

Member
XNullUser
Joined
Dec 28, 2020
Messages
375
Reaction score
10
Points
18
NullCash
34
I'm pretty sure there is no patch at all..
Stronzodicane made this patch by himself (I'll not spend nullcash to see what it contains) I guess it's the 2 or 3 modified php files you need to replace in the dedicated directories.
 

d-shilko

Well-known member
Pro
Master
Diamond
Elite
Joined
Jun 10, 2021
Messages
2,490
Reaction score
1,408
Points
113
NullCash
6,262
I'm pretty sure there is no patch at all..
Stronzodicane made this patch by himself (I'll not spend nullcash to see what it contains) I guess it's the 2 or 3 modified php files you need to replace in the dedicated directories.
I have downloaded this patch, research and used on all my sites. I very good understand how it work. I guesses Stronzodicane not developed this patch because it has highly qualified(level) code.
 
Last edited:

xiketo

Member
XNullUser
Joined
Oct 22, 2020
Messages
149
Reaction score
1
Points
18
NullCash
28
Thank you!
Post automatically merged:

Thank you!
 

chibi

Active member
Elite
XNullUser
Joined
Aug 12, 2021
Messages
113
Reaction score
169
Points
43
NullCash
396
I'm pretty sure there is no patch at all..
Stronzodicane made this patch by himself (I'll not spend nullcash to see what it contains) I guess it's the 2 or 3 modified php files you need to replace in the dedicated directories.

Index.php :

PHP:
<?php
/**
* Modulo CVE-2021-43789
*
* @author       Giuseppe Tripiciano <admin@areaunix.org>
* @copyright    Copyright (c) 2021 Giuseppe Tripiciano
* @license      You cannot redistribute or resell this code.
*/

header("Expires: Mon, 26 Jul 1997 05:00:00 GMT");
header("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT");

header("Cache-Control: no-store, no-cache, must-revalidate");
header("Cache-Control: post-check=0, pre-check=0", false);
header("Pragma: no-cache");

header("Location: ../");
exit;


fixcve202143789.php :

Forum don't allow more than 5000 characters : LINK

Capture d’écran de 2022-01-02 08-47-31.png

Capture d’écran de 2022-01-02 09-00-42.png


It's a real module.
 
Last edited:

stronzodicane

Active member
Elite
XNullUser
Joined
Dec 13, 2021
Messages
36
Reaction score
187
Points
33
NullCash
1,010
I'm pretty sure there is no patch at all..
Stronzodicane made this patch by himself (I'll not spend nullcash to see what it contains) I guess it's the 2 or 3 modified php files you need to replace in the dedicated directories.
that's is ! A simple module to close this vulnerability... I realized the code using the detail for this specific fix (github)
 

personalkiwi

Member
XNullUser
Joined
Dec 5, 2021
Messages
185
Reaction score
0
Points
16
Location
Napoli
Website
www.pianetasvapo.com
NullCash
348
Funziona davvero, allora?
Post automatically merged:

Provato e con store commander non segnala problemi di vulnerabilità
 
Last edited:
Top