HC's Capture the Flag website
CTF Contests
25C3-CTF
25C3-CTF final results
Advisory #116
From team squareroots
New advisory by : manager
Affected service(s): ultrashare
Severity [lmh] : medium
===== Problem =====
ultrashare discloses _all_ flags as comments in the html-sourcecode
===== Impact =====
all flags can be access by simply browsing the site
===== Fix =====
remove the last two lines of /var/ultrashare/templates/index.rhtml
Rating
[0] Not in the original version. Maybe another team modified this at your box.