Recently a Brazilian hacker have found a Remote Command execution vulnerability on Facebook which allows the full controls of the server, for which Facebook rewarded a highest bounty of $33,500 to him. Now again another Security Expert and Penetration tester “Ebrahim Hegazy” have discovered another Remote Command Execution Vulnerability on Yahoo.
The vulnerability exists on the Chinese sub-domain of Yahoo site, i.e. http://tw.user.mall.yahoo.com/rating/list?sid=$Vulnerability . According to the Blog post of Ebrahim,
Any remote user can manipulate the input to the sid parameter in the above URL, that passes the parameter value to an eval() PHP function on the server end. Server kernel version was old and its is vulnerable too. Attacker can easily run exploit of the kernel and gain a root access over the server.
Ebrahim have also posted the video demonstrating the Vulnerability.
Ebrahim had reported the vulnerability to Yahoo security team last week and Yahoo team have fixed it within a days.
Community Discussion
Join the conversation. Ask questions, share solutions, and help others.
Be the first to start the discussion!
