PAFileDB Error Message Path Disclosure Vulnerability
BID:11817
Info
PAFileDB Error Message Path Disclosure Vulnerability
| Bugtraq ID: | 11817 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 04 2004 12:00AM |
| Updated: | Dec 04 2004 12:00AM |
| Credit: | Discovered by y3dips <[email protected]>. |
| Vulnerable: |
PHP Arena paFileDB 3.1 |
| Not Vulnerable: | |
Discussion
PAFileDB Error Message Path Disclosure Vulnerability
paFileDB is prone to an installation path disclosure. If invalid requests are made to certain scripts, the installation path is included in the returned error message.
paFileDB is prone to an installation path disclosure. If invalid requests are made to certain scripts, the installation path is included in the returned error message.
Exploit / POC
PAFileDB Error Message Path Disclosure Vulnerability
An exploit is not required. The following example URI requests were submitted:
http://www.example.com/pafiledb/includes/admin/admins.php
http://www.example.com/pafiledb/includes/admin/category.php
http://www.example.com/pafiledb/includes/team.php
An exploit is not required. The following example URI requests were submitted:
http://www.example.com/pafiledb/includes/admin/admins.php
http://www.example.com/pafiledb/includes/admin/category.php
http://www.example.com/pafiledb/includes/team.php
Solution / Fix
PAFileDB Error Message Path Disclosure Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
PAFileDB Error Message Path Disclosure Vulnerability
References:
References: