Hi,
Live demo: Slamwijs: Maak vrienden, doe mee en val op!
Download CMS + Emulator+ NEW COMMANDS (you can find it in habboweb folder): https://mega.co.nz/#!lwJQERIQ!SD011B...0cWuXXbGE42vas
S
SWF: https://mega.co.nz/#!9VJS1axK!LkXljW...1Q_sV8yN9OQbVo
Have fun
bye
we nee dworlking groups and a working housekeeping
I have checked the codes and its so bad coded, and its really ugly. Anyway this CMS have many exploits, i've discovered a few exploits in 15 minutes.
Here are some direct mirrors
CMS
http://sulake.cc/cms/phpretro.rar
SWFS
http://sulake.cc/swf%20packs/r63.rar
Register page, habblet map and much more. I'm not gonna share the exact exploits with you, because you release something where you do not even checked the codes from.Originally Posted by XetroHotel
You also said there where exploits in Azure (LMFAO).. But you don't want to share them?!
This is not my edit
If you are not going to share fixes, why even comment ... this is why the community is dead a select few people helping others rest are a*seholes who make statements such as "I have checked the codes and its so bad coded, and its really ugly. Anyway this CMS have many exploits, i've discovered a few exploits in 15 minutes." but not actually going to share them or share a fix to help the new or less experienced people of the community
A while ago I already passed to one of your developers.
@Johno "If you are not going to share fixes, why even comment ..." ?? What are you saying, now people know that they are exploits in it, and they do not to use this. If they do not want to get hacked lol. RevCMS and the another CMS's are more secure, this CMS (edit) is a whole exploit.
Yes you say it has exploits, XetroHotel asked you Where and you say you will not share the "exact exploits" that is not helping the community is it, maybe if you share what the exploits are the community can work on it, you say Rev is secure, it can be made sure but as standard it isn't
In his defense, it's not ideal for the hotel's exploits to be public..
However, fixes should be posted immediately. If this actually IS PHPRetro, I wouldn't be surprised at exploits.
Found only: csrf vulnerability in: Quikregister/Start .
So many old PHPRetro exploits. Ugh, why?
Many dutch hotels that using this cms were hacked by the same hacker. I think someone put exploits in it with the intention to hack hotels or maybe it are old not patched phpretro exploits. So this is not recommended.
I didnt know people still bother with phpretro. In my opinion I'd prefer ubercms then phpretro. Much more features in uber. Still , this release was a good effort though. Better than nothing.
Reply With Quote