PHP-Nuke Direct Script Access Security Bypass Vulnerability
BID:10447
Info
PHP-Nuke Direct Script Access Security Bypass Vulnerability
| Bugtraq ID: | 10447 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 01 2004 12:00AM |
| Updated: | Jun 01 2004 12:00AM |
| Credit: | Disclosure of this issue is credited to Squid <[email protected]>. |
| Vulnerable: |
Paul Laudanski BetaNC PHP-Nuke Bundle osCommerce Osc2Nuke 7x 1.0 Francisco Burzi PHP-Nuke 7.3 Francisco Burzi PHP-Nuke 7.2 Francisco Burzi PHP-Nuke 7.1 Francisco Burzi PHP-Nuke 7.0 FINAL Francisco Burzi PHP-Nuke 7.0 Francisco Burzi PHP-Nuke 6.9 Francisco Burzi PHP-Nuke 6.7 Francisco Burzi PHP-Nuke 6.6 Francisco Burzi PHP-Nuke 6.5 RC3 Francisco Burzi PHP-Nuke 6.5 RC2 Francisco Burzi PHP-Nuke 6.5 RC1 Francisco Burzi PHP-Nuke 6.5 FINAL Francisco Burzi PHP-Nuke 6.5 BETA 1 Francisco Burzi PHP-Nuke 6.5 Francisco Burzi PHP-Nuke 6.0 Francisco Burzi PHP-Nuke 5.6 Francisco Burzi PHP-Nuke 5.5 Francisco Burzi PHP-Nuke 5.4 Francisco Burzi PHP-Nuke 5.3.1 Francisco Burzi PHP-Nuke 5.2 a Francisco Burzi PHP-Nuke 5.2 Francisco Burzi PHP-Nuke 5.1 Francisco Burzi PHP-Nuke 5.0.1 Francisco Burzi PHP-Nuke 5.0 |
| Not Vulnerable: | |
Discussion
PHP-Nuke Direct Script Access Security Bypass Vulnerability
PHP-Nuke is affected by a direct script access security vulnerability. This issue is due to a failure to properly validate the location and name of the file being accessed.
This issue will allow an attacker to gain access to sensitive scripts such as the 'admin.php' script. The attacker may be able to exploit this unauthorized access to carry out attacks against the affected application.
PHP-Nuke is affected by a direct script access security vulnerability. This issue is due to a failure to properly validate the location and name of the file being accessed.
This issue will allow an attacker to gain access to sensitive scripts such as the 'admin.php' script. The attacker may be able to exploit this unauthorized access to carry out attacks against the affected application.
Exploit / POC
PHP-Nuke Direct Script Access Security Bypass Vulnerability
No exploit is required to leverage this issue. The following proof of concepts have been provided:
http://www.example.com/admin/case/case.adminfaq.php/admin.php?op=FaqCatGo
http://www.example.com/admin/admin.php/index.php
http://www.example.com/admin/modules/blocks.php/admin.php
No exploit is required to leverage this issue. The following proof of concepts have been provided:
http://www.example.com/admin/case/case.adminfaq.php/admin.php?op=FaqCatGo
http://www.example.com/admin/admin.php/index.php
http://www.example.com/admin/modules/blocks.php/admin.php
Solution / Fix
PHP-Nuke Direct Script Access Security Bypass Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
PHP-Nuke Direct Script Access Security Bypass Vulnerability
References:
References:
- osCommerce Homepage (osCommerce)
- PHPNuke INP Homepage (PHPNuke INP)
- [Squid 2004-betaNC-001] Inadequate Security Checking in NukeCops betaNC Bundle (Squid
- [Squid 2004-Nuke-001] Inadequate Security Checking in PHPNuke v7.3 and earlier (Squid
- [Squid 2004-OSC2Nuke-001] Inadequate Security Checking in OSC2Nuke (Squid