phpCMS Parser.PHP File Disclosure Vulnerability

Bugtraq ID:	13843
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 02 2005 12:00AM
Updated:	Jun 02 2005 12:00AM
Credit:	Discovery of this vulnerability is credited to "Bernhard M?ller" <[email protected]>.
Vulnerable:	phpCMS phpCMS 1.2.1 pl1 phpCMS phpCMS 1.2.1 phpCMS phpCMS 1.2 .0
Not Vulnerable:	phpCMS phpCMS 1.2.1 pl2

phpCMS Parser.PHP File Disclosure Vulnerability

phpCMS is reported prone to a file disclosure vulnerability. It is demonstrated that this issue may be leveraged to disclose the contents of arbitrary web-server readable files. The vulnerability exists in the 'class.layout_phpcms.php' source file.

A remote attacker may exploit this vulnerability to reveal files that contain potentially sensitive information.

phpCMS Parser.PHP File Disclosure Vulnerability

The following example is available:

http://www.example.com/parser/parser.php?&phpcmsaction=FILEMANAGER&language=de/../../../../../../../etc/passwd

phpCMS Parser.PHP File Disclosure Vulnerability

Solution:
The vendor has released an update to address this issue:


phpCMS phpCMS 1.2 .0

• phpCMS phpCMS 1.2.1pl2
  http://www.phpcms.de/download/index.en.html

phpCMS phpCMS 1.2.1

• phpCMS phpCMS 1.2.1pl2
  http://www.phpcms.de/download/index.en.html

phpCMS phpCMS 1.2.1 pl1

• phpCMS phpCMS 1.2.1pl2
  http://www.phpcms.de/download/index.en.html

phpCMS Parser.PHP File Disclosure Vulnerability

References:

• Important: Vulnerability in phpCMS 1.2.0 / 1.2.1 and 1.2.1pl1! (phpCMS)
  
• phpCMS Homepage (phpCMS)