BBS E-Market Professional Multiple File Disclosure Vulnerabilities
BID:11191
Info
BBS E-Market Professional Multiple File Disclosure Vulnerabilities
| Bugtraq ID: | 11191 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 15 2004 12:00AM |
| Updated: | Sep 15 2004 12:00AM |
| Credit: | Discovery is credited to Jeong Jin-Seok from STG Security. |
| Vulnerable: |
BBS E-Market Professional BBS E-Market Professional bf_130 (v1.3.0) |
| Not Vulnerable: |
BBS E-Market Professional BBS E-Market Professional bf_140 (v1.4.0) |
Discussion
BBS E-Market Professional Multiple File Disclosure Vulnerabilities
BBS E-Market Professional is reported prone to multiple file disclosure vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data.
A remote attacker can disclose arbitrary Web-readable files by supplying directory traversal sequences such as '../' to the server. This results in improper access to potentially sensitive files located outside of the document root of the web server.
BBS E-Market patch level bf_130 (v1.3.0) and prior are affected by these issues.
BBS E-Market Professional is reported prone to multiple file disclosure vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data.
A remote attacker can disclose arbitrary Web-readable files by supplying directory traversal sequences such as '../' to the server. This results in improper access to potentially sensitive files located outside of the document root of the web server.
BBS E-Market patch level bf_130 (v1.3.0) and prior are affected by these issues.
Exploit / POC
BBS E-Market Professional Multiple File Disclosure Vulnerabilities
No exploit is required.
The following proof of concept is available:
http://www.example.com/bemarket/shop/index.php?pageurl=viewpage&
filename=../../../../../../../../[etc]/[passwd]
http://www.example.com/becommunity/board/f_down.php?dn_path=
/../../../../../../../../../[etc]/[passwd]
No exploit is required.
The following proof of concept is available:
http://www.example.com/bemarket/shop/index.php?pageurl=viewpage&
filename=../../../../../../../../[etc]/[passwd]
http://www.example.com/becommunity/board/f_down.php?dn_path=
/../../../../../../../../../[etc]/[passwd]
Solution / Fix
BBS E-Market Professional Multiple File Disclosure Vulnerabilities
Solution:
The vendor has released patch level is bf_140 (v1.4.0) to address these issues. Please contact the vendor to obtain the patch.
Solution:
The vendor has released patch level is bf_140 (v1.4.0) to address these issues. Please contact the vendor to obtain the patch.
References
BBS E-Market Professional Multiple File Disclosure Vulnerabilities
References:
References:
- Homepage (BBS E-Market Professional)