JAF CMS Directory Traversal Vulnerability Allowing Script Code Execution And Information Disclosure
BID:11627
Info
JAF CMS Directory Traversal Vulnerability Allowing Script Code Execution And Information Disclosure
| Bugtraq ID: | 11627 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 08 2004 12:00AM |
| Updated: | Nov 08 2004 12:00AM |
| Credit: | <[email protected]> disclosed this issue. |
| Vulnerable: |
Salims Softhouse JAF CMS 3.0 RC Salims Softhouse JAF CMS 2.5 Salims Softhouse JAF CMS 2.1 .0 Salims Softhouse JAF CMS 2.0.5 Salims Softhouse JAF CMS 2.0 Salims Softhouse JAF CMS 1.5 Salims Softhouse JAF CMS 1.0 |
| Not Vulnerable: | |
Discussion
JAF CMS Directory Traversal Vulnerability Allowing Script Code Execution And Information Disclosure
It is reported that JAF CMS is susceptible to a directory traversal vulnerability allowing information disclosure and server-side script execution. This issue is due to a failure of the application to properly sanitize user-supplied URI input.
To execute arbitrary PHP script code, the attacker requires the ability to create or modify files on the computer hosting the affected application.
This vulnerability may be exploited by remote attackers to execute server-side PHP script code in the context of the affected application, or to gain access to the contents of arbitrary, potentially sensitive files with the privileges of the Web server.
Version 3.0 RC and prior are reported vulnerable to this issue.
It is reported that JAF CMS is susceptible to a directory traversal vulnerability allowing information disclosure and server-side script execution. This issue is due to a failure of the application to properly sanitize user-supplied URI input.
To execute arbitrary PHP script code, the attacker requires the ability to create or modify files on the computer hosting the affected application.
This vulnerability may be exploited by remote attackers to execute server-side PHP script code in the context of the affected application, or to gain access to the contents of arbitrary, potentially sensitive files with the privileges of the Web server.
Version 3.0 RC and prior are reported vulnerable to this issue.
Exploit / POC
JAF CMS Directory Traversal Vulnerability Allowing Script Code Execution And Information Disclosure
An exploit is not required.
An exploit is not required.
Solution / Fix
JAF CMS Directory Traversal Vulnerability Allowing Script Code Execution And Information Disclosure
Solution:
The vendor has released a fixed version of 3.0 RC to resolve this issue:
Salims Softhouse JAF CMS 1.0
Salims Softhouse JAF CMS 1.5
Salims Softhouse JAF CMS 2.0
Salims Softhouse JAF CMS 2.0.5
Salims Softhouse JAF CMS 2.1 .0
Salims Softhouse JAF CMS 2.5
Salims Softhouse JAF CMS 3.0 RC
Solution:
The vendor has released a fixed version of 3.0 RC to resolve this issue:
Salims Softhouse JAF CMS 1.0
-
Salims Softhouse jaf_cms_ver_3_0RC_fixed.tar.gz
http://prdownloads.sourceforge.net/jaf-cms/jaf_cms_ver_3_0RC_fixed.tar .gz?download
Salims Softhouse JAF CMS 1.5
-
Salims Softhouse jaf_cms_ver_3_0RC_fixed.tar.gz
http://prdownloads.sourceforge.net/jaf-cms/jaf_cms_ver_3_0RC_fixed.tar .gz?download
Salims Softhouse JAF CMS 2.0
-
Salims Softhouse jaf_cms_ver_3_0RC_fixed.tar.gz
http://prdownloads.sourceforge.net/jaf-cms/jaf_cms_ver_3_0RC_fixed.tar .gz?download
Salims Softhouse JAF CMS 2.0.5
-
Salims Softhouse jaf_cms_ver_3_0RC_fixed.tar.gz
http://prdownloads.sourceforge.net/jaf-cms/jaf_cms_ver_3_0RC_fixed.tar .gz?download
Salims Softhouse JAF CMS 2.1 .0
-
Salims Softhouse jaf_cms_ver_3_0RC_fixed.tar.gz
http://prdownloads.sourceforge.net/jaf-cms/jaf_cms_ver_3_0RC_fixed.tar .gz?download
Salims Softhouse JAF CMS 2.5
-
Salims Softhouse jaf_cms_ver_3_0RC_fixed.tar.gz
http://prdownloads.sourceforge.net/jaf-cms/jaf_cms_ver_3_0RC_fixed.tar .gz?download
Salims Softhouse JAF CMS 3.0 RC
-
Salims Softhouse jaf_cms_ver_3_0RC_fixed.tar.gz
http://prdownloads.sourceforge.net/jaf-cms/jaf_cms_ver_3_0RC_fixed.tar .gz?download
References
JAF CMS Directory Traversal Vulnerability Allowing Script Code Execution And Information Disclosure
References:
References:
- JAF CMS Home Page (Salims Softhouse)
- JAF CMS: Release Notes (Salims Softhouse)
- Vulnerabilities in JAF CMS ([email protected])