Artmedic Webdesign Hpmaker Script Multiple Vulnerabilities

Bugtraq ID:	10207
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 24 2004 12:00AM
Updated:	Apr 24 2004 12:00AM
Credit:	Discovery is credited to DarkBicho <[email protected]>.
Vulnerable:	artmedic webdesign hpmaker
Not Vulnerable:

Artmedic Webdesign Hpmaker Script Multiple Vulnerabilities

It has been reported that hpmaker is prone to a multiple vulnerabilities that may allow an attacker to include malicious files containing arbitrary code to be executed on a vulnerable system and carry out directory traversal attacks to disclose sensitive information.

Artmedic Webdesign Hpmaker Script Multiple Vulnerabilities

No exploit is required.

The following proof of concept has been supplied:
http://www.example.com/index.php?p=../../../../../../../../etc/passwd

Artmedic Webdesign Hpmaker Script Multiple Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Artmedic Webdesign Hpmaker Script Multiple Vulnerabilities

References:

• hpmaker product page (artmedic webdesign)
  
• VULNERABILITIES IN ARTMEDIC HPMAKER FILE INCLUSION VULNERABILITY (DarkBicho)